"We wanted Tom and Rick to train in the OCTAVE approach because it focuses on information-protection decisions that are based on risks to the confidentiality, integrity, and availability of critical ...