Introducing OCTAVE Allegro - Software Engineering Institute ...

Acknowledgements
The authors of this report would like to acknowledge the many internal and external collaborators
whose support, input, skills, and guidance have made this work possible.
First, the authors would like to thank Chris Alberts and Audrey Dorofee for their previous efforts
in developing the OCTAVE method and OCTAVE-S. Without their hard work, there would be no
basis from which to develop and transition the OCTAVE Allegro methodology.
The authors would also like to thank members of the CERT ® Survivable Enterprise Management
(SEM) team who have contributed to the evolution of OCTAVE since it was introduced. In particular,
the authors would like to thank Bradford Willke and Sam Merrell for their review and the
constructive feedback they provided on this document and the OCTAVE Allegro method. The
authors would also like to acknowledge the support and contributions of William Wilson. As the
technical manager for the SEM team, Bill has been the champion for the OCTAVE work since its
inception.
The development, piloting, and codification of the OCTAVE Allegro method would not have
been possible without the generous input, collaboration, and determination of the employees of
Clark County, Nevada. The CERT Program has developed a special relationship with this organization
over the past few years, and their willingness to try new methods, provide us with useful
feedback, and help to refine techniques that can be used by many organizations is unparalleled. In
particular, we would like to thank Michael Smith, IT Security Administrator, who has been a
champion for the development and institutionalization of OCTAVE Allegro at Clark County and
who has consistently strived to improve the organization’s security and resiliency. We have been
fortunate to work with him in a challenging and rewarding environment such as Clark County.
The authors would like to thank ictQATAR and Q-CERT for their support in the refinement and
transition of the OCTAVE Allegro methodology.
We would also like to thank Jonathan Coleman, Visiting Scientist in the CERT Program, for his
expert review and comments. As one of the original users of the OCTAVE method, Jonathan has
extensive real-world knowledge that has been very valuable to us in developing OCTAVE Allegro.
Last but certainly not least, the authors would like to thank Pamela Curtis, who consistently provides
the SEM team with high-quality editing services and who is willing to teach us rather than
to correct us. Through her work, she has had a profound effect on our writing and editing skills.
® CERT is registered in the U. S. Patent and Trademark Office by Carnegie Mellon University.
SOFTWARE ENGINEERING INSTITUTE | vii