Security Risk Assessment Using Octave Allegro: Part 1: Introduction to Allegro: Rationale and Application

OCTAVE's been around for many years, going on ten I think. But it was originally developed for large complex organizations who were looking for a way to evaluate their information security risk, in the context of the operation of the business. And OCTAVE was one of the first evaluation methods to consider security outside of just vulnerability assessment. It has methods to collect information about organizational vulnerabilities, and it also has many volumes of guidance on risk assessment and the principles of risk management.