Article View: comp.security.misc
Article #129Re: Risk assessments
From: Haakon Styri
Date: Tue, 11 Aug 1992 11:36
Date: Tue, 11 Aug 1992 11:36
18 lines
1398 bytes
1398 bytes
In article <1992Aug10.184148.1731@drycas.club.cc.cmu.edu>, GRIGG@dirac.physics.jmu.edu (Steve Grigg) writes: |> |> I'm interested in learning how to conduct a risk assessment. Every book I |> looked in which purported to be on computer security paid little more than |> cursory notice to RA's. I was under the impression that RA's are pretty |> important. Can anyone point me at a text which gives the topic its due? Thanks |> in advance. One nice text that I like very much, though it's not covering computer security, is Barry Boehm's IEEE tutorial on "Software Risk Management". I like the idea of covering Risk Management rather than just the Risk Analysis. (My experience is that too many well planned or well analysed 'things' still go wrong because they're not well managed.) Anyway, reading Boehm's introductions to each part of the tutorial is recommended. --- Haakon Styri Norwegian Telecom Research
Technical Details
Message-ID:
<1992Aug11.113657.6869@nntp.nta.no>Path:
arc1-ca.pugleaf.net!sparky!uunet!mcsun!sunic!ugle.unit.no!nuug!nntp.nta.no!hal.nta.no!styriReferences:
<1992Aug10.184148.1731@drycas.club.cc.cmu.edu>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sunic!ugle.unit.no!nuug!nntp.nta.no!hal.nta.no!styri From: styri@hal.nta.no (Haakon Styri) Subject: Re: Risk assessments Message-ID: <1992Aug11.113657.6869@nntp.nta.no> Lines: 19 Sender: news@nntp.nta.no Nntp-Posting-Host: balder.nta.no Reply-To: styri@nta.no Organization: Norwegian Telecom Research References: <1992Aug10.184148.1731@drycas.club.cc.cmu.edu> Date: Tue, 11 Aug 92 11:36:57 GMT