Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process

By Richard A. Caralli, James Stevens, Lisa R. Young, W. Wilson. 2007

346 citations recorded by the source corpus.

Abstract : This technical report introduces the next generation of the Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) methodology, OCTAVE Allegro. OCTAVE Allegro is a methodology to streamline and optimize the process of assessing information security risks so that an organization can obtain sufficient results with a small investment in time, people, and other limited resources. It leads the organization to consider people, technology, and facilities in the context of their relationship to information and the business processes and services they support. This report highlights the design considerations and requirements for OCTAVE Allegro based on field experience with existing OCTAVE methods and provides guidance, worksheets, and examples that an organization can use to begin performing OCTAVE Allegro-based risk assessments.

View Paper: https://www.semanticscholar.org/paper/490fb4c8fad85a2ea6975504b4984d713cfb0361

Citations in the corpus

• Information security and privacy in healthcare: current state of research (2010, unknown): “More recently, an advanced version of this approach – OCTAVE Allegro – has been introduced, which focuses on information assets exclusively and considers other assets (people, process and technology) only to facilitate effective identification of threats (Caralli et al., 2007).”