Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Publications

NIST SP 800-55 Vol. 2

Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program

Date Published: December 2024

Supersedes: SP 800-55 Rev. 1 (07/16/2008)

Author(s)

Katherine Schroeder (NIST), Hung Trinh (NIST), Victoria Pillitteri (NIST)

Abstract

Keywords

assessment; information security; measurement; measures; metrics; performance; program; reports; security controls
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-55v2
Download URL

Supplemental Material:
None available

Publication Parts:
SP 800-55 Vol. 1

Document History:
09/24/20: SP 800-55 Rev. 2 (Draft)
11/14/22: SP 800-55 Rev. 2 (Draft)
01/17/24: SP 800-55 Vol. 2 (Draft)
12/04/24: SP 800-55 Vol. 2 (Final)