What publication provides an approach for performing system-level risk assessments? Response:

NIST Special Publication 800-30, 'Guide for Conducting Risk Assessments,' details a nine-step process for performing risk assessments, which includes preparing for the assessment, conducting the assessment, and communicating the results. This publication specifically targets an approach for system-level risk assessments to identify threats and vulnerabilities.

NIST SP 800-39, 'Managing Information Security Risk,' provides an organization-wide program for managing information security risk, not specifically the methodology for system-level assessments.

NIST SP 800-60, 'Guide for Mapping Types of Information and Information Systems to Security Categories,' provides guidance on categorizing information and information systems, not on risk assessment methodology.

NIST SP 800-50, 'Building an Information Technology Security Awareness and Training Program,' focuses on security awareness and training, which is unrelated to performing risk assessments.