Assessing and Managing Security Risk in IT Systems

Appendix C DIAGRAMS AND TABLES

INTRODUCTION

The McCumber Cube methodology is a structured approach to analyzing all facets of information security requirements. However, it also provides a common information security lexicon that can be employed for specifying requirements, making risk mitigation decisions, and developing and deploying safeguards. Additionally, many aspects of the model allow us to use the categorization and mapping to greatly expand the value of following this approach.

In this appendix, we will provide a compendium of helpful diagrams, charts, and tables that can be employed in information security programs or reports of any kind. These charts are presented as ideas and templates for your use. They can also be adapted or modified ...