🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Thread View: comp.security.misc
2 messages
2 total messages Started by Steve Grigg Mon, 10 Aug 1992 13:41
Risk assessments
#125
Author: Steve Grigg
Date: Mon, 10 Aug 1992 13:41
8 lines
879 bytes
  I'm interested in learning how to conduct a risk assessment. Every book I
looked in which purported to be on computer security paid little more than
cursory notice to RA's. I was under the impression that RA's are pretty
important. Can anyone point me at a text which gives the topic its due? Thanks
in advance.

Steve
Re: Risk assessments
#129
Author: Haakon Styri
Date: Tue, 11 Aug 1992 11:36
18 lines
1398 bytes
In article <1992Aug10.184148.1731@drycas.club.cc.cmu.edu>, GRIGG@dirac.physics.jmu.edu (Steve Grigg) writes:
|> 
|>   I'm interested in learning how to conduct a risk assessment. Every book I
|> looked in which purported to be on computer security paid little more than
|> cursory notice to RA's. I was under the impression that RA's are pretty
|> important. Can anyone point me at a text which gives the topic its due? Thanks
|> in advance.

One nice text that I like very much, though it's not covering computer
security, is Barry Boehm's IEEE tutorial on "Software Risk Management".
I like the idea of covering Risk Management rather than just the Risk
Analysis. (My experience is that too many well planned or well analysed
'things' still go wrong because they're not well managed.) Anyway, reading
Boehm's introductions to each part of the tutorial is recommended.

---
Haakon Styri
Norwegian Telecom Research
Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads