Educause Security Discussion
mailing list archives
Anyone using OCTAVE process?
From: David Grisham <DGrisham () SALUD UNM EDU>
Date: Wed, 19 Sep 2007 13:00:57 -0600
UNM HSC is considering the use of the OCTAVE process as a risk management system. We have previously tried risk
analysis software with various success.
Would anyone who has used the OCTAVE process for a risk analysis please let us know:
1. What was the length of your learning curve for those involved?
2. What length of time did your process take to complete?
3. Where the outcomes-action items understandable and usable?
Any other recommendations and/or information would be greatly appreciated.
David Grisham, Manager, IT Security
UNM Hospitals, HSC
Dgrisham () salud unm edu
- Anyone using OCTAVE process? David Grisham (Sep 19)