NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Measurement Guide for Information Security Volume 1 - Identifying and Selecting Measures

Published

Author(s)

Katherine Schroeder, Hung Trinh, Victoria Pillitteri

Abstract

This document provides guidance on how an organization can develop information security measures to identify the adequacy of in-place security policies, procedures, and controls. It explains the measures prioritization process and how to evaluate measures.
Citation
Special Publication (NIST SP) - 800-55v1
Report Number
800-55v1
NIST Pub Series
Special Publication (NIST SP)
Pub Type
NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-55v1
Local Download

Keywords

assessment, information security, measurement, measures, metrics, performance, qualitative, quantitative, reports, security controls.
Cybersecurity and privacy

Citation

Schroeder, K. , Trinh, H. and Pillitteri, V. (2024), Measurement Guide for Information Security Volume 1 - Identifying and Selecting Measures, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-55v1, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=958991 (Accessed October 27, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created December 4, 2024
Was this page helpful?