Risk Management
4 frameworks in this category
Frameworks focused on identifying, assessing, and managing cybersecurity risks across organizations. These frameworks help establish risk governance, risk assessment methodologies, and risk treatment strategies.
NIST Cybersecurity Framework
The NIST Cybersecurity Framework provides a policy framework of computer security guidance for how private sector organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks.
NIST Artificial Intelligence Risk Management Framework
The NIST AI Risk Management Framework provides a comprehensive approach for organizations to design, develop, deploy, and use AI systems in a responsible and trustworthy manner.
ISO/IEC 27005:2022 Information Security Risk Management
ISO/IEC 27005 provides guidelines for information security risk management supporting ISO/IEC 27001.
Factor Analysis of Information Risk
FAIR is the only international standard quantitative model for information security and operational risk.