SIRA Podcast Debut and My Correction

After my speaking engagement at the Secure360 conference in St. Paul, MN, I participated in Society of Information Risk Analysts’ podcast.  The podcast recently went live and you can find it here:

Episode 6: Secure360 interviews

SIRA’s podcasts have typically been enjoyable and this one is no different.  Now, in spirit of “full disclosure”, my interviewcontained an error.  I reference Jack Jones’ “book”, but what I was actually referring to is his white paper on his Factor Analysis of Information Risk (FAIR) methodology.  I have heard Jack speak a few times and have become very interested in is approach to risk analysis.

I would recommend anyone that is trying to find a method for risk analysis, take a look at Jack’s work here.  I also recommend subscribing to his blog at RiskAnalys.is.