Comments requested on NIST ‘Guide to Data-Centric System Threat Modeling’

Published: Thursday, 31 March 2016 08:13

NIST is requests public comments on its draft Special Publication (SP) 800-154, ‘Guide to Data-Centric System Threat Modeling’.

Data-centric system threat modeling is a form of risk assessment that models aspects of the attack and defense sides for selected data within a system.

Draft SP 800-154 provides information on the basics of data-centric system threat modeling so that organizations can use it as part of their risk management processes instead of relying solely on conventional ‘best practice’ recommendations. 

The public comment period for the publication closes on April 15th, 2016. 

Read Draft SP 800-154 
Download the comment template

Send comments on Draft SP 800-154 to with ‘Comments SP 800-154’ in the subject line.