NIST seeks suggestions from the public to improve the revision to SP 800-30, Revision 1. The draft guidance describes a three-step process that includes key activities to prepare for risk assessments, activities to successfully conduct risk assessments and approaches to maintain the currency of assessment results. NIST: “It’s important, in that climate today, where we have very sophisticated cyberattacks taking place, to have the ability to do a fairly comprehensive analysis on the threat space [that can] cause severe or potentially catastrophic impacts to our missions””]
Source: https://www.healthcareinfosecurity.com/nist-revising-risk-assessment-guidance-a-4078