Information Security Risk Assessment Standard
Number:
SEC-11-01-S was 141.10 (1.2-1.3)
Purpose
A formal risk assessment framework allows agencies to assess risk in a consistent fashion and enables the comparison of risk between agencies. Common foundations aligning with NIST allow for consistent measurement, solution interoperability, and reduced overhead using common documentation acceptable to multiple regulatory agencies.