MANAGING INFORMATION SECURITY RISKS

FROM THE CERT COORDINATION CENTER AT THE SEI, THIS BOOK DESCRIBES OCTAVE, A NEW METHOD OF EVALUATING INFORMATION SECURITY RISK.@BULLET = THIS BOOK IS FROM THE CERT COORDINATION CENTER AND NETWORKED SYSTEMS SURVIVABILITY (NSS) GROUP AT THE SEI, THE SOFTWARE ENGINEERING INSTITUTE AT CARNEGIE MELLON UNIVERSITY. @BULLET = THERE IS GROWING INTEREST IN OCTAVE. THE DOD MEDICAL HEALTH SYSTEM IS ONE EARLY ADOPTER AND THERE IS ALSO KEEN INTEREST FROM THE FINANCIAL SECTOR. @BULLET = THE AUTHORS ARE THE LEAD DEVELOPERS OF THE OCTAVE METHOD AND ARE EXPERTS IN HELPING ORGANIZATIONS MANAGE THEIR OWN SECURITY RISKS.@SUMMARY = THIS IS A DESCRIPTIVE AND PROCESS-ORIENTED BOOK ON A NEW SECURITY RISK EVALUATION METHOD, OCTAVE. OCTAVE STANDS FOR OPERATIONALLY CRITICAL THREAT, ASSET, AND VULNERABILITY EVALUATION (SM). AN INFORMATION SECURITY RISK EVALUATION HELPS ORGANIZATIONS EVALUATE ORGANIZATIONAL PRACTICE AS WELL AS THE INSTALLED TECHNOLOGY BASE AND TO MAKE DECISIONS BASED ON POTENTIAL IMPACT.@AUTHBIO =