Managing Information Security Risks: The OCTAVE Approach

By Christopher J. Alberts, Audrey J. Dorofee. 2002

376 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/8a61bb378039b2fec9430a04cfd52149f759aac4

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

1. Ajit Appari
2. M. Eric Johnson
3. Henri Barki
4. Janine L. Spears
5. Paul L. Bannerman

Citations in the corpus

• Information security and privacy in healthcare: current state of research (2010, methodology): “…in organisational resources and multipronged approaches such as the OCTAVE approach that uses asset-based information security assessment (Alberts and Dorofee, 2002), Bayesian network analysis (Maglogiannis and Zafiropoulos, 2006), elicitation of user’s privacy valuation using…”
• User Participation in Information Systems Security Risk Management (2010, background): “Finally, user participation via accountability (UPacct) is an index of activities that security standards recommend to establish accountability (Alberts and Dorofee 2003; ISO/IEC 2000; ITGI 2005).”