Managing Information Security Risks

Provides information on the principles and implementations of OCTAVE. This book also provides a systematic way to evaluate and manage information security risks. It illustrates the implementation of self-directed evaluations and shows how to tailor evaluation methods to different types of organizations.