Cissp Risk Management Methodologies

Front 1

NIST 800-30 Risk Management Guide for Information Technology
Systems

Back 1

A U.S. federal standard that is focused on IT risks

Front 2

Facilitated Risk Analysis Process (FRAP)

Back 2

A focused, qualitative
approach that carries out prescreening to save time and money

Front 3

Operationally Critical Threat, Asset, and Vulnerability Evaluation
(OCTAVE)

Back 3

Team-oriented approach that assesses organizational and
IT risks through facilitated workshops

Front 4

AS/NZS 4360

Back 4

Australia and New Zealand business risk management
assessment approach.

Front 5

ISO/IEC 27005

Back 5

International standard for the implementation of a
risk management program that integrates into an information security
management system (ISMS)

Front 6

Failure Modes and Effect Analysis

Back 6

Approach that dissects a component
into its basic functions to identify flaws and those flaws’ effects

Front 7

Fault tree analysis

Back 7

Approach to map specific flaws to root causes in
complex systems.

Front 8

CRAMM

Back 8

Central Computing and Telecommunications Agency Risk
Analysis and Management Method