December 17, 2025
Author(s)
Stephen Quinn, Nahla Ivy, Matthew Barrett, Larry Feldman, Greg Witte, Robert Gardner
This document supplements NIST Interagency Report (IR) 8286, Integrating Cybersecurity and Enterprise Risk Management (ERM), by providing additional detail regarding risk guidance, identification, and analysis. This report offers examples and information