NIST 800-171 · 3.11 Risk Assessment

3.11.1 Periodically assess risk

Periodically assess the risk to operations, assets and individuals from operating the system.

Mapped across 7 provisions

Equivalent and related requirements in other frameworks and regulations.

CCPA / CPRARelatedCurated
§1798.150 Duty to implement reasonable security
Risk assessment & management
DORARelatedCurated
Art. 6 ICT risk management framework
Risk assessment & management
HIPAARelatedCurated
§164.308(a)(1) Security management process
Risk assessment & management
LGPDRelatedCurated
Art. 46 Security measures
Risk assessment & management
NIS2RelatedCurated
Art. 21(2)(a) Risk analysis and information system security policies
Risk assessment & management
NIST 800-53RelatedCurated
RA-3 Risk assessment
Risk assessment & management
NIST CSF 2.0RelatedCurated
ID.RA-01 Vulnerabilities identified and recorded
Risk assessment & management