Alberts C. Managing Information Security Risks: The OCTAVE Approach [Електронний ресурс] / C. Alberts, A. Dorofee. – New York : Addison Wesley, 2002. – 512 p. : іл. – ISBN 0-321-11886-3
- Електронна версія (pdf / 4,1 Mb)
Статистика використання: Завантажень: 9
Анотація:
Information security requires far more than the latest tool or technology. Organizations must understand exactly what they are trying to protect--and why--before selecting specific solutions. Security issues are complex and often are rooted in organizational and business concerns. A careful evaluation of security needs and risks in this broader context must precede any security implementation to insure that all the relevant, underlying problems are first uncovered.
The OCTAVE approach for self-directed security evaluations was developed at the influential CERT(R) Coordination Center. This approach is designed to help you:
- Identify and rank key information assets
- Weigh threats to those assets
- Analyze vulnerabilities involving both technology and practices
OCTAVE(SM) enables any organization to develop security priorities based on the organization's particular business concerns. The approach provides a coherent framework for aligning security actions with overall objectives.
Managin
The OCTAVE approach for self-directed security evaluations was developed at the influential CERT(R) Coordination Center. This approach is designed to help you:
- Identify and rank key information assets
- Weigh threats to those assets
- Analyze vulnerabilities involving both technology and practices
OCTAVE(SM) enables any organization to develop security priorities based on the organization's particular business concerns. The approach provides a coherent framework for aligning security actions with overall objectives.
Managin
Тема:
- Ключові слова
- операційні системи, ОС, операционные системы, ОС, operating systems, OS, Betriebssystem, systeme d'exploitation
- захист інформації, защита информации, information security
- інформаційна безпека, ІБ, информационная безопасность, ИБ, information security
- захист даних, ЗД, защита данных, ЗД, data security
- системне адміністрування, системное администрирование
- безпека інформації, безопасность информации, information security