Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

ASSET: Security Assessment Tool for Federal Agencies



Elizabeth B. Lennon


This ITL Bulletin describes the features and capabilities of the Automated Security Self-Evaluation Tool (ASSET), ITL's governmentwide IT security assessment tool. ASSET automates the completion of the security questionnaire in NIST Special Publication 800-26, Security Self-Assessment Guide for Information Technology Systems. OMB directs federal agencies to use this document as the basis for conducting their annual reviews under the Federal Information Security Management Act (FISMA).
ITL Bulletin -


Automated Security Self-Evaluation Tool, security assessment tool


Lennon, E. (2003), ASSET: Security Assessment Tool for Federal Agencies, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed April 16, 2024)
Created June 1, 2003, Updated February 19, 2017