RE: [dssa] question: is there a service available that does what the NEISAS project (and ISO 27010) describes?

[<salgeier@xxxxxxxxxxx>]

Mikey:

Sorry to have missed the call yesterday.  I know the developers of NEISAS
pretty well.  It is a cool  tool and was well regarded by the organizations
that piloted it.  If you'd like, I can do an introduction to them for you.
They might have leads on similar programs or initiatives.  We might even be
able to see if there's a way for us to use their capability. 

Thank you,

Scott C. Algeier
Executive Director, IT-ISAC

-----Original Message-----
From: owner-dssa@xxxxxxxxx [mailto:owner-dssa@xxxxxxxxx] On Behalf Of Mike
O'Connor
Sent: Friday, April 20, 2012 8:29 AM
To: DSSA WG
Subject: [dssa] question: is there a service available that does what the
NEISAS project (and ISO 27010) describes?


hi all,

i'm chewing away on the "repository" question that Julie Hammer raised on
the call yesterday.  i found a reference to the NEISAS project in the notes
and went out to their site to see what it's about.  here's a link

        http://www.neisas.eu/

there's a movie on that page that describes how the system works (they built
a prototype as a part of their project).  it's very interesting!  

unfortunately, the project wrapped up earlier this year with the publication
of an ISO standard (ISO 27010) which "provides controls and guidance
specifically relating to initiating, implementing, maintaining, and
improving information security in inter-organizational and inter-sector
communications."   that's quite a mouthful that makes much more sense once
you've watched the movie.

so here's the question of the day.  is there a service like this up and
running somewhere?  i know, that's a weird question, but it too make more
sense too if you've watched the movie -- maybe i'm over-promoting it, but i
think exploring the concept they worked on would be really useful in our
"confidential information" context.  

thanks,

mikey

- - - - - - - - -
phone   651-647-6109  
fax             866-280-2356  
web     http://www.haven2.com
handle  OConnorStP (ID for public places like Twitter, Facebook, Google,
etc.)