10.1. Overview of Process 8A

Upon completing process 7, you identified the risks to your organization's critical assets and evaluated the potential impact on your organization of those risks. In the first workshop of process 8 (also referred to as process 8A), you analyze all the risk-related information that you gathered throughout the evaluation and decide how to improve your organization's security posture.

Process 8A Workshop

Process 8A is implemented using the core analysis team members and any supplemental personnel that they decide to include. It takes an experienced team about a day to complete the activities in this workshop. Review all activities for this process and decide whether your team collectively has the required knowledge and ...

Get Managing Information Security Risks: The OCTAVESM Approach now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.