Managing Information Security Risks: The OCTAVESM Approach

11.1. Overview of Process 8B

One of the most difficult tasks in any improvement activity is maintaining the momentum generated during an evaluation. As you conduct an evaluation, you spend concentrated time gathering information, analyzing it, and creating solutions. Because of the intensity of these activities and the well-defined goals of the process, you develop a momentum that culminates in creating solution strategies and plans. It's easy to think that the hard work is over when you finish the final activity, but actually it is just beginning. In this workshop your organization's senior managers must think about what happens after the evaluation, setting forth the direction for security improvement and establishing their sponsorship for ...