{"id":"https://openalex.org/W4387757997","doi":"https://doi.org/10.6028/nist.sp.800-221","title":"Enterprise impact of information and communications technology risk :","display_name":"Enterprise impact of information and communications technology risk :","publication_year":2023,"publication_date":"2023-10-18","ids":{"openalex":"https://openalex.org/W4387757997","doi":"https://doi.org/10.6028/nist.sp.800-221"},"language":"en","primary_location":{"id":"doi:10.6028/nist.sp.800-221","doi":"https://doi.org/10.6028/nist.sp.800-221","is_oa":true,"landing_page_url":"https://doi.org/10.6028/nist.sp.800-221","pdf_url":"http://dx.doi.org/10.6028/nist.sp.800-221","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"National Institute of Standards and Technology","raw_type":"report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dx.doi.org/10.6028/nist.sp.800-221","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Stephen Quinn","orcid":"https://orcid.org/0000-0003-1436-684X","observed_orcids":["https://orcid.org/0000-0003-1436-684X"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen Quinn","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0003-1436-684X","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011274931","display_name":"Nahla Ivy","orcid":"https://orcid.org/0000-0003-4741-422X","observed_orcids":["https://orcid.org/0000-0003-4741-422X"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nahla Ivy","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0003-4741-422X","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079332703","display_name":"Matthew Barrett","orcid":"https://orcid.org/0000-0002-7689-427X","observed_orcids":["https://orcid.org/0000-0002-7689-427X"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matthew Barrett","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0002-7689-427X","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015856375","display_name":"Larry Feldman","orcid":"https://orcid.org/0000-0003-3888-027X","observed_orcids":["https://orcid.org/0000-0003-3888-027X"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Larry Feldman","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0003-3888-027X","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045373175","display_name":"Daniel Topper","orcid":"https://orcid.org/0000-0003-2612-7547","observed_orcids":["https://orcid.org/0000-0003-2612-7547"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Topper","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0003-2612-7547","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012631809","display_name":"Greg Witte","orcid":"https://orcid.org/0000-0002-5425-1097","observed_orcids":["https://orcid.org/0000-0002-5425-1097"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Greg Witte","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0002-5425-1097","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003293104","display_name":"Karen A. Scarfone","orcid":"https://orcid.org/0000-0001-6334-9486","observed_orcids":["https://orcid.org/0000-0001-6334-9486"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Karen Scarfone","raw_affiliation_strings":["National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000"],"raw_orcid":"https://orcid.org/0000-0001-6334-9486","affiliations":[{"raw_affiliation_string":"National Institute of Standards and Technology Attn : Applied Cybersecurity Division , Information Technology Laboratory 100 Bureau Drive (Mail Stop 2000) Gaithersburg , MD 20899-2000","institution_ids":["https://openalex.org/I1321296531","https://openalex.org/I4210126846"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Robert Gardner","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Gardner","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5112852530","display_name":"Julie Chua","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Julie Chua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.7925000190734863,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11572","display_name":"Information Technology Governance and Strategy","score":0.7925000190734863,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.20200000703334808,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12276","display_name":"Risk Management in Financial Firms","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1402","display_name":"Accounting"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ict-risk-management","display_name":"ICT risk management","score":0.9509999752044678},{"id":"https://openalex.org/keywords/enterprise-risk-management","display_name":"enterprise risk management","score":1.0},{"id":"https://openalex.org/keywords/risk-register","display_name":"risk register","score":0.9010000228881836},{"id":"https://openalex.org/keywords/risk-aggregation","display_name":"risk aggregation","score":0.8709999918937683},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.6779999732971191},{"id":"https://openalex.org/keywords/risk-management-integration","display_name":"risk management integration","score":0.3959999978542328}],"concepts":[{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5293201804161072},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.43709269165992737},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.34527385234832764}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.6028/nist.sp.800-221","doi":"https://doi.org/10.6028/nist.sp.800-221","is_oa":true,"landing_page_url":"https://doi.org/10.6028/nist.sp.800-221","pdf_url":"http://dx.doi.org/10.6028/nist.sp.800-221","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"National Institute of Standards and Technology","raw_type":"report"}],"best_oa_location":{"id":"doi:10.6028/nist.sp.800-221","doi":"https://doi.org/10.6028/nist.sp.800-221","is_oa":true,"landing_page_url":"https://doi.org/10.6028/nist.sp.800-221","pdf_url":"http://dx.doi.org/10.6028/nist.sp.800-221","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"National Institute of Standards and Technology","raw_type":"report"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320332178","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387757997.pdf","grobid_xml":"https://content.openalex.org/works/W4387757997.grobid-xml"},"referenced_works_count":6,"referenced_works":["https://openalex.org/W2892759841","https://openalex.org/W3012330517","https://openalex.org/W4238680313","https://openalex.org/W4285213258","https://openalex.org/W4312383594","https://openalex.org/W4387758057"],"related_works":["https://openalex.org/W4387758057","https://openalex.org/W4416361588","https://openalex.org/W148714974","https://openalex.org/W2064876628","https://openalex.org/W2788764898","https://openalex.org/W3138900250","https://openalex.org/W2200726119","https://openalex.org/W2321369563","https://openalex.org/W2725825150","https://openalex.org/W4242240039"],"abstract_inverted_index":{"All":[0],"enterprises":[1,41],"should":[2],"ensure":[3],"that":[4,76],"information":[5],"and":[6,42,50,62,73,83],"communications":[7],"technology":[8],"(ICT)":[9],"risk":[10,17,35,98,105],"receives":[11],"appropriate":[12],"attention":[13],"within":[14,29],"their":[15,33,43,52,59],"enterprise":[16,31,89,104],"management":[18,36],"(ERM)":[19],"programs.":[20],"This":[21,38,65],"document":[22,66],"is":[23],"intended":[24],"to":[25,46,86,102],"help":[26],"individual":[27],"organizations":[28,45],"an":[30],"improve":[32],"ICT":[34,53,97],"(ICTRM).":[37],"can":[39],"enable":[40],"component":[44],"better":[47],"identify,":[48],"assess,":[49],"manage":[51],"risks":[54,75],"in":[55],"the":[56,68,87,94,103],"context":[57],"of":[58,70,96],"broader":[60,88],"mission":[61],"business":[63],"objectives.":[64],"explains":[67],"value":[69],"rolling":[71],"up":[72],"integrating":[74],"may":[77],"be":[78],"addressed":[79],"at":[80],"lower":[81],"system":[82],"organizational":[84],"levels":[85],"level":[90],"by":[91],"focusing":[92],"on":[93],"use":[95],"registers":[99],"as":[100],"input":[101],"profile.":[106]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2023-10-19T00:00:00"}