Business Threat Modeling(TM) is a practical way to diagnose and quantify threats to customer data, strategic plans, marketing and pricing data without disrupting the operation.

Delivered as a consulting study on a fixed-cost basis, with deliverables in 2 work-weeks. Executed by highly experienced consultants with specific experience in data security in global organizations.

• Diagnoses threats
• Analyzes value at risk in financial terms
• Produces a plan for prioritized, cost-effective security.

Software  Associates provides the compliance and data security community with it's Business Threat Modeling methodology and  popular PTA (Practical Threat Analysis) Professional risk assessment software as a free download package.

Download the PTA - Practical Threat Analysis software for free evaluation

Download the Business threat modeling methodology for free evaluation

What is Business Threat modeling methodology?

Business threat modeling is a risk assessment process designed to help a business understand it's operational risk in dollars and cents. Business threat modeling has proven it's effectiveness since 2003 in a wide number of domains:

• Legacy applications modernization
• Sarbanes-Oxley IT audit
• Call centers
• IT infrastructure modernization
• Data loss prevention
• Internal fraud detection, mitigation and quantification
• New applications development
• Systematic evaluation of vulnerabilities in third-party-vendor software

What kind of data is required ?

We collect data in a Business Threat Modeling project using human intelligence (individual or group interviews with TOP Mapping ) and electronic intelligence gathering (network surveillance) to provide quantitative measurement of existing data security violations at the level of channel (Web, FTP, IM and more....), application, organizational entity and data content.

What kind of results will I get? 

• The output of a Business threat modeling study is a cost-effective data security plan.
• The plan includes the most cost-effective data security countermeasures that reduce the risk level to a minimum.

How is risk calculated?

Business Threat Modeling uses the popular PTA (Practical Threat Analysis free risk assessment software for Windows. With thousands of users world-wide at companies of all sizes from independent security and compliance consultants to large organizations like Intel and Microsoft, Business Threat Modeling helps you understand risk and mitigate threats in practical terms that every business understands - dollars and cents.

 So how do I get started?

If you haven't already downloaded the free risk assessment software and the methodology document  that's the first step.

Click here to download PTA; the free risk assessment software, and the free Business Threat Modeling methodology. Install PTA Professional on any Windows XP or Vista PC. Select one of the support packages. If you're a small business - you should check out our Customer data security on a budget program. In order to do a ISO27001 based risk assessment, just download ISO 27001 Library and within hours you'll be producing cost-effective risk control plans.

The software is updated on a regular basis - application updates are posted on the PTA Professional Edition Updatespage

Community

Visit the Practical Threat Analysis Professional Forum - and make your voice heard on issues of achieving and sustaining compliance with data security and compliance standards such as ISO 27001, Sarbanes-Oxley, HIPAA, PCI DSS 1.2, NERC/FERC and other security audit methodologies.