Use your Facebook login and see what your friends are reading and sharing.
IT Risk
ANSI approach to the financial impact of cyber risk
A short overview of a recent question-driven dialogue approach to cyber risks as proposed by ANSI.
From: lukeo
Canadian Government 1999 Threat and Risk Assessment Guide
A detailed description of an IT threat and risk methodology
From: lukeo
How much is enough? A Risk Management Approach to Computer Security
The wonderful thesis of Kevin Soo Hoo tracing the history of risk assessment in computer security, and presenting a modern way forward (100 pages, June 2000)
From: lukeo
Risk Analysis of Power Station survival of Cyber Attack, University of Idaho,...
In this paper we present a new cyber security assessment approach, which merges Survivability System Analysis (SSA) with Probability Risk Assessment (PRA). The method adds quantitative in...
From: lukeo
How to estimate the cost of IT downtime
A 2002 presentation from Professor David Patterson, UC Berkeley, describing a simple formula for costing system downtime, with excellent remarks on this issue in general.
From: lukeo
US Border Digital Search Directive, Aug 2009
This is a recent directive issued by the US DHS defining the scope and processes of searching electronic media at a US port of entry.
From: lukeo
Threat Modeling for Pharming
Nice document by Cheong Kai Wee of using threat models to understand pharming - the natural evolution of phishing.
From: lukeo
Digital States At Risk - Modernizing Legacy Systems
In 2008, NASCIO (National Association of State Chief Information Officers of American states) asked state CIOs to participate in a Web-based survey regarding the status of “legacy systems...
From: lukeo
GAO report on bandwidth risks for the financial sector from a Pandemic
Increased demand during a severe pandemic could exceed the capacities of Internet providers’ access networks for residential users and interfere with teleworkers in the securities market ...
From: lukeo
Defining and Implementing Metrics for Project Risk Reduction
Great whitepaper from Tom Kendrick of HP on measuring and managing project risks.
From: lukeo
Metrics That Matter
A presentation from Simone Seth on security metrics, given at the ISSA New York Metro Chapter, March 2010.
From: lukeo
Cloud Computing for Criminals
Comparing the size of the Conficker Botnet to other standard cloud offering, by Rodney Joffe, March 2010.
From: lukeo
The Ultimate Cost of Cloud Computing
Lew Tucker, former CTO of SUN, argues that the reductions in cost for cloud computing will bottom out at the cost of power consumption.
From: lukeo
Reasoning About IT Risks
I have been meaning for some time to upload this wonderful paper from late 2007 on the top information security risks for the then coming year. The paper was a collaborative work from sev...
From: lukeo
