RE: Risk Assessment/Management Software

["Mikhail A. Utin" <mutin () commonwealthcare org>]

Raj,
Your answer is out of Risk Management terminology, nor shows that you are aware of theory of probability, statistical 
modeling, and random processes.
Study and understand when and how you can use statistics. Risk Management automation is based on statistical modeling, 
thus if there are no statistics, there is no modeling.

Regards

Mikhail A. Utin, CISSP, Ph.D.


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Raj Shastrakar
Sent: Wednesday, July 27, 2011 1:31 PM
To: security-basics () securityfocus com
Subject: Fwd: Risk Assessment/Management Software

@ Ryan , We do some automated RA . but it is mostly in excel spreadsheets. You can make one and refine it . I believe 
it has to be organizational based.

@Mikhail, Risk is effect of uncertainty on objectives, whether positive or negative , as per ISO 31000.
If it is uncertain, then it is subjective and it can be calculated.
ISMS ISO27001 talks abt it.  So it can be automated to certain extent.

Regards
Raj Shastrakar
--------------------------THE END------------------------------


On Wed, Jul 27, 2011 at 7:27 PM, Ryan Kovar <rkovar () gmail com> wrote:
> Has anyone used @RISK from Palisades for risk assessment/management 
> for IT vulnerabilities?  Or have any other software they could 
> recommend that specifically applies to IT Security? I am lookign to 
> use an automated risk management/assessment tool for a class and was 
> hoping to find some helpful tutorials other than RTFM'ing the entire 
> Manual :-)
>
> --
> Cheers,
>    Ryan Kovar
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this 
> guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it 
> benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

CONFIDENTIALITY NOTICE: This email communication and any attachments may contain confidential 
and privileged information for the use of the designated recipients named above. If you are 
not the intended recipient, you are hereby notified that you have received this communication 
in error and that any review, disclosure, dissemination, distribution or copying of it or its 
contents is prohibited. If you have received this communication in error, please reply to the 
sender immediately or by telephone at (617) 426-0600 and destroy all copies of this communication 
and any attachments. For further information regarding Commonwealth Care Alliance's privacy policy, 
please visit our Internet web site at http://www.commonwealthcare.org.


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------