Linus OptimIS
Finding the right balance is essential for a successful security solution – why build Fort Knox if you are not protecting gold?
OptimIS is a data gathering and analysis tool based on the proven Linus Optimal Information Security (LOIS) Methodology that:
- identifies the sensitivity of the information to be protected and how that information will be accessed
- determines the most cost-effective controls to reduce risks to acceptable levels.

The Linus ISM Methodology Framework
The focus at all times is on pragmatic cost-effective solutions that will have the minimal impact on existing operations. Controls are assessed holistically, ensuring that additional controls are only established where absolutely necessary.
OptimIS outputs are fed directly into the systems development process and the ongoing management of Information Security within the organisation.
As the organisation grows or new projects are established, the OptimIS database grows with you, dramatically simplifying the ISM process and ensuring security is always “Optimal”.
Usability
- Simple navigation via traditional menu, toolbar or icon interface
- Logical process centric structure
- Multi-screen support – great for workshops
- Filtering, pulldown lists, radio buttons, shortcuts and many more editing ai
Platform
- Portable, minimal footprint
- Networkable
- MS Access Jet database (no licence required – free runtime included)
Licensing
- Manage multiple databases or clients with a single licence
- Add additional licences as required
- Rolling price discount and Corporate pricing for unlimited users
Support
- Complete Methodology and Technical Support.
- Support web site with FAQs, latest downloads and more.
- Comprehensive consultancy support for all ISM stages
OptimIS in Action
OptimIS has been used in numerous commercial and government organisations to define the right security balance.
Key successes include:
- saving of millions of dollars in a government organisation by determining a more cost-effective solution
- resolving stalemates in several IT projects between business and IT stakeholders
- identifying a non-IT security control to resolve a major security exposure at no cost to the project
- defending security decisions against unbalanced audit recommendations
- establishing a successful business case to purchase required security technologies
- conducting risk assessments on established systems, identifying any gaps and enabling limited resources to focus on critical areas only.
|