Five documents from our NIST risk management toolkit, free. The lead document is a complete NIST risk assessment template built on NIST SP 800-30 Rev. 1, with its likelihood, impact and risk scales and the threat, vulnerability and risk-determination tables already laid out; the other four are the treatment plan and personnel checklists that sit alongside it.

What comes with the free NIST risk assessment template

DocumentWhat it is for
NIST SP 800-30 Risk Assessment Report TemplateA fill-in report following SP 800-30 Appendix K: executive summary, risk model, the NIST likelihood and impact scales, threat sources, threat events, vulnerabilities, and adversarial and non-adversarial risk tables.
NIST Risk Treatment PlanThe actions agreed for each risk above tolerance: treatment option, control action, owner, timescale and the expected post-treatment risk level.
NIST Employee Screening ChecklistThe pre-employment checks to complete for a role before access is granted, with a record of who verified each one.
NIST Employee Movement and Termination ChecklistThe access, asset and information steps to complete when someone changes role or leaves, so nothing is left switched on.
NIST Recruitment and New Joiner ChecklistThe security steps for a new starter, from contract clauses to account set-up and awareness briefing.

Get the free NIST risk assessment template and four more


We send one confirmation email first — double opt-in, no exceptions. Download links stay live for 14 days. See our privacy policy.

Want the rest?

This NIST risk assessment template and the four forms with it come from the full NIST Cyber Risk Management Toolkit: policies, procedures, the NIST 800-30 risk assessment workbook, a BIA tool and a NIST CSF 2.0 maturity assessment. The complete contents list is on the product page.

Free templates for other frameworks