
196 SOFTWARE QUALITY ASSURANCE
principles, attributes, and outputs. Principles are the fundamental
concepts driving the OCTAVE evaluation process. Attributes are
derived from principles and are the tangible elements, and outputs are
the required results that must be achieved.
OCTAVE is a comprehensive, systematic, context-driven and self-
directed evaluation approach. Organizations that successfully apply
this approach are consistently able to maintain a proactive security
posture and are able to bring the organizational point of view to infor-
mation security risk management activities.*
OCTAVE in Risk Management An information security risk ev ...