conducting-cyber-risk-assessment-with-nist-800-30 - NIST 800-30 Cyber Risk Assessment
Execute cyber risk assessment using NIST SP 800-30 Rev 1 methodology
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- define scope
- identify threat sources
- identify threat events
- identify vulnerabilities
- determine likelihood
- determine impact
- compute risk
- communicate results
- maintain assessment
- drive treatment
Inputs
- system inventory
- threat intelligence
- vulnerability data
- business context
- risk model
Outputs
- risk register
- risk assessment report
- executive briefing
- treatment recommendations
- residual risk scores
Requirements
- NIST SP 800-30 Rev 1
- system boundary
- agreed risk model
- GRC tool access