conducting-cyber-risk-assessment-with-nist-800-30 - Cyber Risk Assessment with NIST 800-30
Conduct cybersecurity risk assessment using NIST SP 800-30 Rev 1 methodology
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- define assessment scope
- identify threat sources
- identify threat events
- identify vulnerabilities
- determine likelihood
- determine impact
- calculate risk levels
- generate risk register
- produce assessment report
Inputs
- asset inventory
- threat intelligence
- vulnerability data
- business impact
- risk model
Outputs
- risk assessment report
- risk register
- executive summary
- risk mitigation recommendations
- risk maintenance plan
Requirements
- NIST SP 800-30 Rev 1
- NIST SP 800-39
- MITRE ATT&CK framework