Perhaps the NIST documentation listed on the bibliography?
- NIST SP 800-30, Rev. 1, Guide for Conducting Risk Assessments by Joint
Task Force Transformation Initiative. (Sep, 2012).
------------------------------
- NIST SP 800-34 Rev. 1, Contingency Planning Guide for Federal
Information Systems by Marianne Swanson, Pauline Bowen, Amy Wohl Phillips,
Dean Gallup, David Lynes. (May, 2010).
------------------------------
- NIST SP 800-37, Rev. 2, Risk Management Framework for Information
Systems and Organizations: A System Life Cycle Approach for Security and
Privacy by Joint Task Force Transformation Initiative. (Dec, 2018).
------------------------------
- NIST SP 800-39, Managing Information Security Risk: Organization,
Mission, and Information System View by Joint Task Force Transformation
Initiative. (Mar, 2011).
------------------------------
- NIST SP 800-53, Rev. 5, Security and Privacy Controls for Information
Systems and Organizations by Joint Task Force Transformation Initiative.
(Sep, 2020).
------------------------------
- NIST SP 800-55, Rev. 1, Performance Measurement Guide for Information
Security by Elizabeth Chew, Marianne Swanson, Kevin Stine, Nadya Bartol,
Anthony Brown, Will Robinson. (Jul, 2008).
------------------------------
- NIST SP 800-61, Rev. 2, Computer Security Incident Handling Guide by
Paul Cichonski, Tom Millar, Tim Grance, Karen Scarfone. (Aug, 2012).
------------------------------
- NIST SP 800-128, Guide for Security-Focused Configuration Management
of Information Systems by Arnold Johnson, Kelley Dempsey, Ron Ross, Sarbari
Gupta, Dennis Bailey. (Aug, 2011).
------------------------------
- NIST SP 800-160, Vol. 1, Systems Security Engineering: Considerations
for a Multidisciplinary Approach in the Engineering of Trustworthy Secure
Systems by Ron Ross, Michael McEvilley, Janet Carrier Oren. (Mar, 2018).
-
PATRICK Gillilan ISSEP, CISSP, CGRC, CISM, C|EH
