NIST Special Publication 800-37 Revision 1
Guide for Applying the Risk Management Framework to Federal Information Systems
A Security Life Cycle Approach
JOINT TASK FORCE TRANSFORMATION INITIATIVE
Computer Security Division Information Technology Laboratory National Institute of Standards and Technology Gaithersburg, MD 20899-8930
U.S. Department of Commerce
Gary Locke, Secretary
National Institute of Standards and Technology
This is proprietary material solely for authorized instructor use. Not authorized for sale or distribution in any
manner. This document may not be copied, scanned, duplicated, forwarded, distributed, or posted on a website, in whole or part.
Using a spreadsheet, financial calculator, or trial and error to find the root of the equation, we
IRRNX-20 = 20.34%
The IRR criteria implies accepting the NX-20.
The profitability index is the present value of…