Managing Information Security Risks: The OCTAVESM Approach

6.2. Before the Workshop: Consolidate Information from Processes 1 to 3

Before you can analyze the information that you collected during processes 1 to 3, you need to organize it. Consolidating, or grouping, data provides information in a format you can easily read and understand. This section presents three activities in which the focus is grouping information from processes 1 to 3. These activities do not require decision making and can be carried out by one team member or performed incrementally at the end of processes 2 and 3. They can also be automated.

When you consolidate data from processes 1 to 3, you need to represent the data as originally recorded. You shouldn't paraphrase, edit, or interject opinions into the data as you consolidate ...