Managing Information Security Risks: The OCTAVESM Approach

4.7. Sample Scenario

The senior managers at MedSite held a meeting to select analysis team members. The team that they selected is shown in Table 4-3. With the exception of the logistics coordinator, all analysis team members were assigned to this effort on a half-time basis. An information technology member was identified as an alternate, because the work schedules of all information technology staff members were subject to emergency interruptions.

Table 4-3. Analysis Team Members

Name of Core Analysis Team Member	Job Function in MedSite
L. Pierce (analysis team leader)	Operational manager for Surgery A
J. Cutter (recorder)	Mid-level administrative clerk from Records
S. Nolan	Information technology staff member
K. Brown for logistics (part-time)	Facilities ...