After my speaking engagement at the Secure360 conference in St. Paul, MN, I participated in Society of Information Risk Analysts’ podcast. The podcast recently went live and you can find it here:
Episode 6: Secure360 interviews
SIRA’s podcasts have typically been enjoyable and this one is no different. Now, in spirit of “full disclosure”, my interviewcontained an error. I reference Jack Jones’ “book”, but what I was actually referring to is his white paper on his Factor Analysis of Information Risk (FAIR) methodology. I have heard Jack speak a few times and have become very interested in is approach to risk analysis.
I would recommend anyone that is trying to find a method for risk analysis, take a look at Jack’s work here. I also recommend subscribing to his blog at RiskAnalys.is.