The latest enterprise risk management news from around the world

NIST seeks comments on integrating cyber security and enterprise risk management guidance

The US NIST is asking professionals to comment on the second public draft of its NISTIR 8286, Integrating Cybersecurity and Enterprise Risk Management (ERM) guidance. This aims to promote greater understanding of the relationship between cyber security risk management and ERM and the benefits of integrating those approaches.

This second public draft of NISTIR 8286 contains the same main concepts as the initial public draft, but their presentation has been revised to clarify the concepts and address other comments from the public.

The public comment period closes on August 21st, 2020.

Go to https://csrc.nist.gov/publications/detail/nistir/8286/draft to take part in the consultation.

The abstract for NISTIR 8286 is as follows (verbatim):

The increasing frequency, creativity, and variety of cybersecurity attacks means that all enterprises should ensure cybersecurity risk is getting the appropriate attention within their enterprise risk management (ERM) programs. This document is intended to help individual organizations within an enterprise improve their cybersecurity risk information, which they provide as inputs to their enterprise’s ERM processes through communications and risk information sharing. By doing so, enterprises and their component organizations can better identify, assess, and manage their cybersecurity risks in the context of their broader mission and business objectives. Focusing on the use of risk registers to set out cybersecurity risk, this document explains the value of rolling up measures of risk usually addressed at lower system and organization levels to the broader enterprise level.



Want news and features emailed to you?

Signup to our free newsletters and never miss a story.

A website you can trust

The entire Continuity Central website is scanned daily by Sucuri to ensure that no malware exists within the site. This means that you can browse with complete confidence.

Business continuity?

Business continuity can be defined as 'the processes, procedures, decisions and activities to ensure that an organization can continue to function through an operational interruption'. Read more about the basics of business continuity here.

Get the latest news and information sent to you by email

Continuity Central provides a number of free newsletters which are distributed by email. To subscribe click here.