Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Measurement Guide for Information Security Volume 1 - Identifying and Selecting Measures

Published

Author(s)

Katherine Schroeder, Hung Trinh, Victoria Pillitteri

Abstract

This document provides guidance on how an organization can develop information security measures to identify the adequacy of in-place security policies, procedures, and controls. It explains the measures prioritization process and how to evaluate measures.
Citation
Special Publication (NIST SP) - 800-55v1
Report Number
800-55v1

Keywords

assessment, information security, measurement, measures, metrics, performance, qualitative, quantitative, reports, security controls.

Citation

Schroeder, K. , Trinh, H. and Pillitteri, V. (2024), Measurement Guide for Information Security Volume 1 - Identifying and Selecting Measures, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-55v1, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=958991 (Accessed January 14, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created December 4, 2024