Managing Information Security Risks: The OCTAVESM Approach

Audrey J. Dorofee

Audrey Dorofee is a senior member of the technical staff in the Networked Systems Survivability Program at the Software Engineering Institute (SEI). She is responsible for developing, transitioning, and training security risk management methods, tools, and techniques. She is currently working on OCTAVE and other areas in the security domain. Prior to this work, Dorofee was developing and delivering software and systems development risk management practices and was project lead for risk management in the Risk Program at the SEI.

Prior to joining the SEI, Dorofee was a member of the technical staff with the MITRE Corporation in Houston, Texas, supporting various types of work for the National Aeronautics and Space Administration ...