SEM01P - Ways to Fit Security Risk Management to Your Environment Using the OCTAVE Methodology
PLEASE NOTE: Separate registration and fee are required to attend this seminar.

Sunday, April 03 | 2:00PM–5:30PM | Executive Forum (lower level)
Session Type: Professional Development
This tutorial provides insight into the flexibility and applicability of the Operationally Critical Threat, Asset, Vulnerability Evaluation (OCTAVE) methodology for security risk management in higher education. OCTAVE, developed by the Software Engineering Institute and publicly available, has built-in tailoring capabilities. In addition to an overview of the tailoring options and a sample version tailored for K-12 schools, two presenters from higher education will share their experiences in applying OCTAVE.

Presenters

  • Carol Myers

  • Javier Torner

    Information Security Officer, California State University, San Bernardino
  • Carol Woody

    Sr Technical Staff, Software Engineering Institute, Carnegie Mellon University

Resources & Downloads