[gnso-ff-pdp-may08] Risk Management

["Mike O'Connor" <mike@xxxxxxxxxx>]

Here's a question for the group.  Anybody out there familiar with 
security risk-management techniques?
I was the temporary-interim-acting Chief Information Security Officer 
for the Minnesota State College system a few years back and drew a 
little picture of the process (based on a bunch of standards).  I've 
posted a copy of that flowchart on our wiki under Best 
Practices.  Here's a link to the picture;
https://st.icann.org/pdp-wg-ff/index.cgi?risk_management

I'm starting to wonder if our analysis wouldn't benefit from an 
approach like this.  Thoughts?
m


voice: 651-647-6109
fax: 866-280-2356

web: www.haven2.com