IR 8286 Rev. 1, Integrating Cybersecurity and Enterprise Risk Management (ERM)
In effectNIST · NIST Interagency Report · December 18, 2025
Summary
Updates guidance for bringing cybersecurity risk into enterprise risk management, so senior leaders can see the cybersecurity risk posture and practitioners understand strategic objectives when making risk decisions.
Replaces
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- National Institute of Standards and Technology (NIST)
- Type
- NIST Interagency Report
- Number
- IR 8286 Rev. 1
- Issued
- December 18, 2025
- Status
- In effect
Still in force, possibly with amendments.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.