Risk Assessment Standards

My employer is jumping in with both feet for OCTAVE.  I've been
through some training, and it seems like a good method.

We're also using an automated tool and other consulting assistance
from http://www.aticorp.org/ , which we believe will significantly
improve the speed of the assessments.

Best of luck.

Ken

On Wed, 10 Nov 2004 10:05:01 +0100, Lucien Fransman
<lucien.fransman@siennax.com> wrote:
> On Monday 08 November 2004 14:14, Alt, Brandon C. wrote:
> > I'm looking to find what standards are available for performing a
> > security risk assessment. What's out there? I know of Cobra and Octave,
> > but have never used them. Does anyone have any experience with these
> > two? What other standards do other follow?
>
> There is also (sun's) ESA (Enterprise Security Assessment) that I know of.
> Ofcourse a lot of companies that perform certifications use "appropriate
> security assessment methodologies" but they are variations of the above, or
> (a subset) of the requirements of the certification. (Think itsec, trust
> services/systrust)
> With kind regards
>
> Enchanter_tim
>
> ----
> This e-mail is intended exclusively for the addressee(s), and may not be
> passed on to, or made available for use by any person other than the
> addressee(s). Siennax rules out any and every liability resulting from any
> electronic transmission.
> ----