Choosing a Security Option: The InfoSecure Methodology
Shari Lawrence Pfleeger, Thomas Ciszek · IT Professional · 2008
A four-step process can help organizations evaluate assets to be protected, potential assailants, and likely methods and tactics. It then pulls the results together as a plan of action for investing in cybersecurity in ways that protect the most critical organizational information and processes.