Managing Information Security Risks: The OCTAVESM Approach

Appendix B. Worksheets

This appendix contains a set of worksheets that are used during the OCTAVE Method. We have classified the worksheets into the following types:

1. Knowledge elicitation worksheets. These are used during processes 1 through 3. There is one set of worksheets to be used for all three processes.

2. Asset profile. This profile is a set of worksheets that includes all of the information gathered or created for a critical asset. You will complete an asset profile for each critical asset.

3. Strategies and actions. These worksheets are used when developing the organizationwide protection strategy and the action list in process 8A.

All of the worksheets include a basic set of instructions derived from the OCTAVE Method Implementation Guide, ...