How much of a risk taker are you?

Why jeopardize your business by relying on a reactive approach? Wouldn't you rather identify information security risks in advance so that you can determine how to address them in a way that supports your organization's mission and priorities?

We developed OCTAVE to help you evaluate your organization's risk. Regardless which of the three available methods you choose, OCTAVE guides you through the process of identifying critical assets, the threats to those assets, and strategies for mitigating your risk. Because the methods are all flexible, you can tailor them to suit your needs.

November 13, 2008

CERT Resiliency Engineering Framework (REF) Outline Published
This document provides a brief overview of the CERT Resiliency Engineering Framework, including purpose statements, goals, and specific practices for each capability area.

November 11, 2008

New Podcast Released
Responding to an e-discovery request involves many of the same steps and roles as responding to a security incident.

October 28, 2008

New Podcast Released
A sustainable security program is based on business-aligned strategy, policy, awareness, implementation, monitoring, and remediation.

more announcements

headlines