Information Technology Services

ASIS International (via TISP)

• General Security Risk Assessment Guidelines

Department of Health and Human Services

• CMS Information Security Risk Assessment (RA) Methodology (pdf)

EDUCAUSE

• Effective Security Practices Guide

Microsoft

• Microsoft Risk Assessment Service (pdf)

National Institute of Standards and Technology

• Guide for Assessing the Security Controls in Federal Information Systems and Organizations (pdf)
  - Building Effective Security Assessment Plans
• Risk Management Guide for Information Technology Systems (pdf)