13.2. The Small Organization

OCTAVE is a context-sensitive approach that is applicable to most organizations. This section examines some of the unique issues related to implementing the approach in a small organization.

13.2.1. Company S

Company S is a small manufacturing facility with 22 people in three departments: shop floor, management, and administrative. The company has one location and many longtime employees. It has used two interconnected computer systems to run its manufacturing equipment and administrative functions for seven years. A Web-based marketing and order-processing system has recently been added, enabling Company S to expand its customer base. The Web system is also connected to the administrative system to enable easy transfer ...

Get Managing Information Security Risks: The OCTAVESM Approach now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.