"First we said it was too cold and that the fish were not feeding. Then we said it was too sunny and the fish were scared. Then we discovered that the fish had gone elsewhere. When we found the fish, we started casting to them with nice juicy baitfish flies."
So also is the story of the ISM Community Risk Assessment Methodology. After more than a few false-starts (Curphey changing the server platform, some flirtation with FAIR, almost scoring a free methodology to have and to hold, the apparent ADHD of the project lead), we are continuing down the merry path of creating our own risk assessment methodology.
Now that we're back to casting for trout, I would like to issue an Internet-wide call for volunteers. What I'm looking for is about a dozen people who know Risk Assessment and simultaneously know how to write well.
Really the methodology consists of several parts:
- A document that describes the process (partially started)
- A set of artifacts to assist in the process such as inventory spreadsheets and a risk register (partially done)
- Reference implementations where we take the process and test it out (not yet, we need the process first)
- References and similar projects
- Glossary
- Foo
I have a handy-dandy spreadsheet to track status. If you are interested in helping out, go to the RA forum at http://www.ism-community.org/forums/t/564.aspx (it's broken right now, I tried to upload the spreadsheet and it bombed out on me) or shoot me an email with a description of what you would like to help out with.
Cheers
--Mike