12.2. Tailoring the OCTAVE Method to Your Organization

The first step as you start preparing to conduct the OCTAVE Method is to decide where you need to modify the method for your organization. The ideas that we present in this section do not address all of the ways in which the method can be tailored. We have included ideas to help you think about your organization's unique needs and decide which aspects of the method you need to adjust to meet those needs. There are two major aspects of the OCTAVE Method that can be tailored: the evaluation activities and the artifacts used during the method. We start with how to tailor the evaluation.

12.2.1. Tailoring the Evaluation

The following list highlights some major areas in which you can modify the ...

Get Managing Information Security Risks: The OCTAVESM Approach now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.