SP 800-100 Rev. 1, Information Security Handbook: A Guide for Executive LeadershipInitial Public Draft
Updated 2 hours ago ()
The initial public draft (ipd) of NIST Special Publication (SP) 800-100r1 (Revision 1), Information Security Handbook: A Guide for Executive Leadership, is now available for comment. Since the original version of SP 800-100 was released in 2006, the cybersecurity landscape, regulatory environment, and NIST's body of guidelines have changed substantially. This revision restructures the handbook to align with the general organization of the NIST Cybersecurity Framework (CSF) 2.0 and provides high-level summaries of key cybersecurity topics, including governance, risk management, information exchange, security awareness and training, contingency planning, configuration management, and incident response. It also discusses the relationships between these core concepts for executive leadership in both public- and private-sector organizations. The document points to other NIST publications throughout for more detailed technical implementation guidelines. The draft covers: An overview of key NIST frameworks and how they relate to one another Governance, including risk management fundamentals and enterprise risk management Topics organized under the CSF's Identify, Protect, and Detect/Resp…
- Tags
- NIST, draft open for comment, SP 800-100 REV. 1
- Related exam domains
- CISSP 1: Security and Risk Management; CISSP 7: Security Operations; CISM 1: Information Security Governance; CISM 2: Information Security Risk Management; CISA 2: Governance and Management of IT; CISA 3: Information Systems Acquisition, Development and Implementation
- Source record id
- https://csrc.nist.gov/pubs/sp/800/100/r1/ipd
- First seen by InfoSec Signals
- Oct 22, 2026
Source: NIST CSRC drafts open for comment, National Institute of Standards and Technology, Computer Security Resource Center about this source more from it
Exam domain labels come from a keyword heuristic and are study hints, not an official mapping. The summary is the publisher's own text, shortened; the linked record is authoritative.