NIST 800-30 Risk Assessment Templates for Confluence

Special Publication 800-30r1, published by the National Institute of Standards and Technology (NIST) in the United States, is a standard for conducting risk assessments. It's mandatory for conducting risk assessments on government projects, and it's widely used for other types of information security risk assessments in the U.S. This blueprint provides a set of templates to help you speed up the process of documenting your 800-30 risk assessment.

• Risk Assessment Report Template
• Plan of Action & Milestones (Federal)
• Plan of Action & Milestones (general)

The subjective aspects of writing a risk assessment report can be tricky to navigate. These templates include extensive comments and guidance about how to present the results a risk assessment in a way that can be understood and acted upon by the organization.