Managing Information Security Risks: The OCTAVE (SM) Approach - SEI Series in Software Engineering

Provides information on the principles and implementations of OCTAVE. This book also provides a systematic way to evaluate and manage information security risks. It illustrates the implementation of self-directed evaluations and shows how to tailor evaluation methods to different types of organizations.