SecurITree is Better
7: Due Diligence Defense
Security risks have many implications for an organization. A major risk is the liability incurred by a breach or disruption of service. Attack tree analysis provides one of the few clear and disciplined methods to prove to your customers and the courts of law that your company's behavior was professional, timely and appropriate. SecurITree provides a simple method for tracking how your company identified potential risks, made cost-effective changes in policy or infrastructure to contain those risks ... and how the company responded through time to newly identified risks.
Keep in mind that customers and regulatory authorities have a legal stake in the security of your company!