IT and Cyber Risk

NIST SP 800-30 RMF is fast becoming a mandate for information security risk assessments for federal entities.

Current final IT Risk assessment report is not very informative. Typically Customers will use the Assessment report to circulate it to the respective teams/executive. In general Comments/justification entered is nowhere displayed. Inherent, Contro...