Hello, we are in the process of creating a risk assessment for cyber security at educational institutions.
I've been using NIST as a guide, but I wanted to know if anybody else has any recommendations or sample risk assessments to provide. Threats must be considered, but they cannot be as severe as those in a business setting.