Understanding an organization's reliance on information systems and how to mitigate the vulnerabilities of these systems can be an intimidating challenge--especially when considering less well-known weaknesses or even unknown vulnerabilities that have not yet been exploited. The authors introduce the Vulnerability Assessment and Mitigation methodology, a six-step process that uses a top-down approach to protect against future threats and system failures while mitigating current and past threats and weaknesses.
Philip S. Anton (Ph.D., Information and Computer Science, University of California at Irvine) is a senior information and computer scientist at RAND.
Robert H. Anderson (Ph.D., Applied Mathematics, Harvard University) is a Senior Information Scientist at RAND. Research areas include social implications of the information revolution; security and safety of internetted networks; computer languages and support environments for modeling and simulation.
Richard Mesic (M.S., D.A.G.S., Probability and Statistics, Michigan State University) is a RAND senior staff member, Defense Planning and Analysis Department.