Security Impact Analysis Overview
What is a Security Impact Analysis (SIA) and why do I need to do it? Check out this webinar to learn about the purpose of an SIA and how to think about the security considerations of potential changes!
Presented by Tom Conkle, CISSP
Optic Cyber Solutions Resources:
Resources Home Page: https://www.opticcyber.com/resources....
RMF Overview - • Risk Management Framework (RMF): Overview
SSP Overview - Getting Started: • SSP Overview: Getting Started
Additional Resources:
Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (NIST SP 800-37): https://csrc.nist.gov/publications/de...
Security and Privacy Controls for Information Systems and Organizations (NIST SP 800-53): https://csrc.nist.gov/publications/de...
Guide for Conducting Risk Assessments (SP 800-30): https://nvlpubs.nist.gov/nistpubs/Leg...
Guide for Security-Focused Configuration Management of Information Systems (NIST SP 800-128): https://nvlpubs.nist.gov/nistpubs/Spe...
Centers for Medicare & Medicaid Services, Security Impact Analysis Template and One Pager: https://www.cms.gov/Research-Statisti...
NIST Computer Security Resource Center (CSRC), Glossary: https://csrc.nist.gov/glossary