Anyone using OCTAVE process?

[David Grisham <DGrisham () SALUD UNM EDU>]

UNM HSC is considering the use of the OCTAVE process as a risk management system.  We have previously tried risk 
analysis software with various success.  
Would anyone who has used the OCTAVE process for a risk analysis please let us know:
1. What was the length of your learning curve for those involved?
2.  What length of time did your process take to complete?
3.  Where the outcomes-action items understandable and usable?
Any other recommendations and/or information would be greatly appreciated.
David Grisham, Manager, IT Security
UNM Hospitals, HSC
(505) 272-5657
Dgrisham () salud unm edu