OCTAVE

[Mark Rogowski <m.rogowski () UWINNIPEG CA>]

Hi Everyone,

I would appreciate some feedback from those of you who have used the
OCTAVE risk assessment methodology.  More specifically:

How has the methodology worked for you, or has it worked at all?
Any major pitfalls?
Did you require outside help to make it a success?
For those who used it, have you or would you consider incorporating it
into the overall risk management process?
Any other insight or comments about OCTAVE?

Thanks.

Mark Rogowski
IT Security
Technology Solutions Centre
University of Winnipeg
Ph: (204) 786-9034