Comments on: The death of risk assessment http://www.software.co.il/2008/11/the-death-of-risk-assessment/ Security and compliance specialists for medical device and healthcare companies Sat, 04 Feb 2012 00:26:39 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: admin http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-132 admin Thu, 20 Aug 2009 08:44:12 +0000 http://www.software.co.il/wordpress/?p=872#comment-132 Steve You seem to be using automated software to troll blogs for keywords. Why don't you take a look at http://dannylieberman.info and comment on the content of one of my blogs. Your blog is pretty good and I'm sure you have something interesting to say for a small business Danny Lieberman Steve
You seem to be using automated software to troll blogs for keywords. Why don’t you take a look at http://dannylieberman.info and comment on the content of one of my blogs. Your blog is pretty good and I’m sure you have something interesting to say for a small business

Danny Lieberman

]]> By: business continuity software http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-131 business continuity software Wed, 19 Aug 2009 22:01:48 +0000 http://www.software.co.il/wordpress/?p=872#comment-131 <strong>business continuity software...</strong> Your topic kernel (1) / Error was interesting when I found it on Wednesday searching for business continuity software as I also have articles and information posted on this subject. Thank You... Steve Noel Sr.... business continuity software…

Your topic kernel (1) / Error was interesting when I found it on Wednesday searching for business continuity software as I also have articles and information posted on this subject. Thank You… Steve Noel Sr….

]]> By: admin http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-130 admin Wed, 15 Jul 2009 07:17:20 +0000 http://www.software.co.il/wordpress/?p=872#comment-130 <a href="#comment-899" rel="nofollow">@Reader </a> Of course! By all means do Danny @Reader
Of course! By all means do
Danny

]]> By: business continuity training http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-129 business continuity training Wed, 15 Jul 2009 06:01:57 +0000 http://www.software.co.il/wordpress/?p=872#comment-129 <strong>business continuity training...</strong> Your topic The One Line MLM Spillover Advantage | MLM Dream Team Blog was interesting when I found it on Wednesday searching for business continuity training as I also have articles and information posted on this subject. Thank You... Steve Noel Sr.... business continuity training…

Your topic The One Line MLM Spillover Advantage | MLM Dream Team Blog was interesting when I found it on Wednesday searching for business continuity training as I also have articles and information posted on this subject. Thank You… Steve Noel Sr….

]]> By: admin http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-128 admin Fri, 10 Apr 2009 05:58:30 +0000 http://www.software.co.il/wordpress/?p=872#comment-128 Someone who is into investing tips and forex trading secrets linked to my blog - which was a little strange to me. I was reminded of my first job out of grad school at Wilshire Associates - when my boss was talking about the investment advisers at Paine-Webber - and how they were churning stocks in order to max their commissions - he called them "baby-rapers" - getting money out of old ladies and innocents. Danny Someone who is into investing tips and forex trading secrets linked to my blog – which was a little strange to me. I was reminded of my first job out of grad school at Wilshire Associates – when my boss was talking about the investment advisers at Paine-Webber – and how they were churning stocks in order to max their commissions – he called them “baby-rapers” – getting money out of old ladies and innocents.

Danny

]]> By: admin http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-127 admin Wed, 28 Jan 2009 06:48:52 +0000 http://www.software.co.il/wordpress/?p=872#comment-127 I think one of the things driving the death of systematic IT risk assessment is the inflation in vendor marketing collateral. When a reputable network analysis vendor like Lancope resorts to using PCI DSS compliance as a reason to buy their product - I know we're not in Kansas anymore. I particular like the part in their collateral about enforcing internal firewall rules - a) what if a company doesn't have internal firewalls ... b) does Lancope software have access to the internal firewall rule table that enables it to measure and enforce firewall rules? Danny Lieberman I think one of the things driving the death of systematic IT risk assessment is the inflation in vendor marketing collateral. When a reputable network analysis vendor like Lancope resorts to using PCI DSS compliance as a reason to buy their product – I know we’re not in Kansas anymore. I particular like the part in their collateral about enforcing internal firewall rules –
a) what if a company doesn’t have internal firewalls …
b) does Lancope software have access to the internal firewall rule table that enables it to measure and enforce firewall rules?

Danny Lieberman

]]> By: Reader http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-126 Reader Tue, 27 Jan 2009 23:21:25 +0000 http://www.software.co.il/wordpress/?p=872#comment-126 Great! Thank you very much! I always wanted to write in my site something like that. Can I take part of your post to my site? Of course, I will add backlink? Regards, Timur I. Alhimenkov Great! Thank you very much!
I always wanted to write in my site something like that. Can I take part of your post to my site?
Of course, I will add backlink?

Regards, Timur I. Alhimenkov

]]> By: iso 13485 training http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-125 iso 13485 training Wed, 10 Dec 2008 23:21:28 +0000 http://www.software.co.il/wordpress/?p=872#comment-125 Project Management complements the SDLC when it comes to Project Quality. It provides a method of managing these unique project efforts, which increases the odds of attaining cost, schedule and quality goals. Since not all projects warrant the same level of cost, schedule and quality goals, it is important to define, as part of the project management process what these objectives are. Is the customer constraining the time of the project, do they have a limited budget, or are they looking for a "cheap" vs. "high- ... Project Management complements the SDLC when it comes to Project Quality. It provides a method of managing these unique project efforts, which increases the odds of attaining cost, schedule and quality goals. Since not all projects warrant the same level of cost, schedule and quality goals, it is important to define, as part of the project management process what these objectives are. Is the customer constraining the time of the project, do they have a limited budget, or are they looking for a “cheap” vs. “high- …

]]> By: iso 13485 training http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-124 iso 13485 training Wed, 10 Dec 2008 09:19:48 +0000 http://www.software.co.il/wordpress/?p=872#comment-124 <strong>iso 13485 training...</strong> Project Management complements the SDLC when it comes to Project Quality. It provides a method of managing these unique project efforts, which increases the odds of attaining cost, schedule and quality goals. Since not all projects warrant the same lev... iso 13485 training…

Project Management complements the SDLC when it comes to Project Quality. It provides a method of managing these unique project efforts, which increases the odds of attaining cost, schedule and quality goals. Since not all projects warrant the same lev…

]]> By: Zeev Solomonik http://www.software.co.il/2008/11/the-death-of-risk-assessment/#comment-123 Zeev Solomonik Fri, 21 Nov 2008 21:59:10 +0000 http://www.software.co.il/wordpress/?p=872#comment-123 Dear Colleagues, I would like to inform you that on October 2008 we released a major update of PTA (Practical Threat Analysis) Professional Edition (1.54 - build 1206). The latest version introduces a revised reporting system which enables better aggregation and sorting of threat model data and analysis results. The new mechanism allows users to define simple Tags Filter queries which filter the data shown in reports according to the tags attached to the threat’s model entities. Practical Threat Analysis is a calculative threat modeling methodology and a risk assessment tool that assist security consultants and analysts in assessing the risks in their systems and building an appropriate risk mitigation policy. Risk level, potential damage and countermeasures required for mitigating the threats are all presented in real financial values. PTA advises on the most cost-effective way to mitigate threats and reduce the risk to an acceptable level. PTA is free-of-charge for students, researchers, software developers and independent security consultants. You are invited to review the latest changes as well as to download and install the freeware software from http://www.ptatechnologies.com/latestupdate.htm. I'll be happy to have your feedback and answer your questions on any issue. Best regards, Zeev Solomonik The PTA Team http://www.ptatechnologies.com zeev at ptatechnologies dot com Dear Colleagues,

I would like to inform you that on October 2008 we released a major update of PTA (Practical Threat Analysis) Professional Edition (1.54 – build 1206). The latest version introduces a revised reporting system which enables better aggregation and sorting of threat model data and analysis results. The new mechanism allows users to define simple Tags Filter queries which filter the data shown in reports according to the tags attached to the threat’s model entities.

Practical Threat Analysis is a calculative threat modeling methodology and a risk assessment tool that assist security consultants and analysts in assessing the risks in their systems and building an appropriate risk mitigation policy. Risk level, potential damage and countermeasures required for mitigating the threats are all presented in real financial values. PTA advises on the most cost-effective way to mitigate threats and reduce the risk to an acceptable level.

PTA is free-of-charge for students, researchers, software developers and independent security consultants. You are invited to review the latest changes as well as to download and install the freeware software from http://www.ptatechnologies.com/latestupdate.htm.

I’ll be happy to have your feedback and answer your questions on any issue.

Best regards,

Zeev Solomonik

The PTA Team
http://www.ptatechnologies.com
zeev at ptatechnologies dot com

]]>