Software Quality Assurance

xvContents

Application Risk Questionnaire (ARQ) 184

Project Risk Log 184

Part 2: Vulnerability, Risk, and reat Analysis 184

Vulnerability and Risk 185

Step 1: Determine What Is Being

Protected and Why 185

Sample Statement 186

Step 2: Identify the System 186

Step 3: Characterize System Operations 187

Step 4: Ascertain What One Does and Does Not

Have Control Over 187

Vulnerability and reat 188

Definitions 188

Four Levels of reats 188

Four Steps of Risk Assessment 189

Step 1: Analysis Techniques Are

Selected and Used 189

Step 2: Identify Vulnerabilities, eir Type, Source,

and Severity 190

Step 3: Identify reats, eir Type, Source, and

Likelihood 190

Step 4: Evaluate Transaction Paths, reat Zones,

and Risk Exposure 190

Part 3: OCTAVE and R ...