Extracting, Streamlining, and Completing a Threat Assessment Methodology from Octave-S~?

摘要

An asset is something that has value to an organization. It can be equipment, a set of records, information (e.g. procedures, trade secrets, insider knowledge, etc.), software applications, or even personnel with key skills and knowledge. A threat is an undesirable event or circumstance that results in the disclosure, modification, loss or destruction, or interruption to the availability of an asset. It is important for an organization to clearly identify assets that are critical to its mission and to assess the potential threats. This is achieved by conducting a threat assessment using a methodology that is thorough and complete. Currently, there is a lack of formalized methodologies that are focused on threat assessment.