internet-b52 : Risk Assessment Resources (from the SAGE mailing list)

A guy (Scott Lazzari) on the SAGE list asked:

I've been tasked with putting together a risk assessment for the local office where I do nuts-to-bolts IT support. So far, I've identified the key equipment, and assigned a criticality level to this equipment. I'm not sure where I should go from here. My background is much more tech-oriented - fixing and installing equipment, servers, etc. so this level of business analysis is a little new to me.
Does anyone have some good resources, or advice they could drop my way?

Summary of some risk assessment resources, with responders, suggested in response:

http://www.securityfocus.com/infocus/1591 [John Buys]
http://www.securitymetrics.org/content/Wiki.jsp [Lynda]
http://www.iatrp.com/ [Brian Kirouac]
www.rcmp-grc.gc.ca/tsb//pubs/it_sec/g2-001_e.pdf [Sean MacGuire, he of Big Brother fame

Tags: risk on technorati, delicious, netscape, google


home :: security :: sage_list_risk_assessment
Sat, 18 Aug 2007 Risk Assessment Resources (from the SAGE mailing list) A guy (Scott Lazzari) on the SAGE list asked: I've been tasked with putting together a risk assessment for the local office where I do nuts-to-bolts IT support. So far, I've identified the key equipment, and assigned a criticality level to this equipment. I'm not sure where I should go from here. My background is much more tech-oriented - fixing and installing equipment, servers, etc. so this level of business analysis is a little new to me. Does anyone have some good resources, or advice they could drop my way? Summary of some risk assessment resources, with responders, suggested in response: http://www.securityfocus.com/infocus/1591 [John Buys] http://www.securitymetrics.org/content/Wiki.jsp [Lynda] http://www.iatrp.com/ [Brian Kirouac] www.rcmp-grc.gc.ca/tsb//pubs/it_sec/g2-001_e.pdf [Sean MacGuire, he of Big Brother fame Tags: risk on technorati, delicious, netscape, google Last Updated: 08/18/2007 09:33 by Richard \| \| Filed in: [/security]
All Content and Images, Copyright, 2006-2008, unless otherwise noted or attributed All opinions are my own and do not necessarily represent the views of my employer.

Sat, 18 Aug 2007