What is NIST 800-30?

NIST Special Publication 800-30, Revision 1, "Guide for Conducting Risk Assessments," provides guidance for conducting risk assessments of federal information systems and organizations. It recommends a risk assessment methodology that involves identifying threats and vulnerabilities, determining the likelihood of threat occurrence, assessing the impact of successful threat exploitation, and calculating the overall risk. It is commonly used by organizations to understand and manage their cybersecurity risks.