Chapter 4. Preparing for OCTAVE
As we pointed out in Chapter 3, you need to prepare before you can successfully conduct an organizationwide information security risk evaluation like the OCTAVE Method. The objective of preparing for the evaluation is to build a solid foundation for coordinating and executing all subsequent evaluation activities. This chapter examines the activities that need to be undertaken to prepare for the OCTAVE Method.