SP 800-221 Rev. 1, Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio: Initial Public Draft
Submit Your Feedback The public comment period is open through December 7, 2026, at 11:59 PM EST. We encourage you to use this comment template when preparing and submitting your response. About the Publication Enterprise information and communications technology risk management (ICTRM) spans and integrates a broad set of disciplines including cybersecurity, privacy, supply chain, operational technology, Internet of Things, and super intelligence. This publication promotes an integrated approach to ICT risk—aggregating and normalizing risk information across domains. Doing so allows organizations to identify, quantify, and communicate risk scenarios in financial, mission, and reputational te
Read at NIST CSRC drafts open for comment
Why it ranks 8 (Routine)
- Standards body
- Draft open for comment
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST CSRC drafts open for comment (csrc.nist.gov)