Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Management
[Top] [All Lists]

Re: Risk Assessment Standards

Subject: Re: Risk Assessment Standards
Date: Wed, 10 Nov 2004 10:05:01 +0100
On Monday 08 November 2004 14:14, Alt, Brandon C. wrote:
I'm looking to find what standards are available for performing a
security risk assessment. What's out there? I know of Cobra and Octave,
but have never used them. Does anyone have any experience with these
two? What other standards do other follow?

There is also (sun's) ESA (Enterprise Security Assessment) that I know of. 
Ofcourse a lot of companies that perform certifications use "appropriate 
security assessment methodologies" but they are variations of the above, or 
(a subset) of the requirements of the certification. (Think itsec, trust 
services/systrust)     
With kind regards

Enchanter_tim

----
This e-mail is intended exclusively for the addressee(s), and may not be
passed on to, or made available for use by any person other than the
addressee(s). Siennax rules out any and every liability resulting from any
electronic transmission.
----

<Prev in Thread] Current Thread [Next in Thread>