Is SOMAP good for risk assessment or it is not in use any more?
Is there any other Open Source IT Risk Management?
3
-
Lots of InfoSec risk frameworks are available. I'm unsure how SOMAP improves on the general access to something like NIST 800-30 and NIST 800-39, for instance. – schroeder♦ Nov 20 '15 at 16:07
1
After skimming the documents, I cannot recommend SOMAP as a guide for risk. I have not reviewed the software, but the guidance on risk in the documents is too cursory to be useful. Also note that the guides for SOMAP have not been updated since their original version published in 2006.
There are lots of IT Risk methodology options for you to look at in varying degrees of complexity, focus, and in availability (free/paid):
-
thanks a lot but it is my first time with risk assessment could you please tell me which of these are free – Dana Bayazeeed Nov 23 '15 at 9:22
-
The links explain it. If you are new to Risk, I would suggest starting with Octave Allegro. – schroeder♦ Nov 23 '15 at 15:50
