Managing Information Security Risks: The OCTAVESM Approach

B.3. Strategies and Actions

Use the worksheets in this section when you define and document the organizationwide protection strategy and near-term action items during process 8A. The following worksheets are contained in this section:

• Current Security Practices Worksheet

• Protection Strategy Worksheet

• Action List Worksheet

B.3.1. Current Security Practices Worksheets

Instructions
Process 8	Activity: Before the Workshop: Consolidate Information from processes 1 to 3 (Section 10.2)
Purpose	To compile current security practice and organizational vulnerability information from processes 1 to 3.
Instructions	Note that there are two tables for each practice area in the Current Security Practices Worksheet. The first table summarizes the results of the surveys ...