Cobra

Tool Identity Card

General information
Basic information to identify the product

Tool name : Cobra
Vendor name : C&A Systems Security
Country of origin : United Kingdom

Level of reference of the tool
Details about the coverage or the « originators » of the solution

Coverage : Local
Supported by organization, club,... (e.g. as sponsor) : N/A

Brief description of the product
Give a brief description of the product containing general information, overview of functions…

• Cobra software tool enables security Risk Assessment to be undertaken by organizations themselves. It evaluates the relative importance of all threats and vulnerabilities, and generates appropriate solutions and recommendations. It will automatically link the risks identified with the potential implications for the business unit. Alternatively, a particular area or issue can be examined 'stand alone', without any impact association. COBRA comes equipped with four discrete knowledge bases that can be further customized using the Module Manager component.

Supported functionality
Specify the functionality this tool provides.

R.A. Method phases supported

• Risk identification : Identify system threats, vulnerabilities and exposures. Measure the degree of actual risk for each area or aspect of a system, and directly link this to the potential business impact.
• Risk analysis :
• Risk evaluation : Identify system threats, vulnerabilities and exposures

Other phases

• N/A

R.M. Method phases supported

• Risk assessment
• Risk treatment : Offer detailed solutions and recommendations to reduce the risks.
• Risk communication : Provide business as well as technical reports.

Other phases

• N/A

Other functionality

• ISO 17799 compliance check : COBRA ISO17799 Consultant component

Information processed

• Reports

Lifecycle
Date of the first edition, date and number of actual version

Date of first release : 90s
Date and identification of the last version : Release 3

Useful links
Link for further information

Official web site : http://www.riskworld.net
User group web site : N/A
Relevant web site : N/A

Languages
List the available languages that the tool supports

Languages available : English

Pricing and licensing models
Specify the price for the product (as provided by the company on December 2005)

• Full Cobra Suite: $1995
• Cobra for ISO17799: $895

Sectors with free availability or discounted price : N/A

Trial before purchase
Details regarding the evaluation period of the tool

CD or download available : Evaluation copy available
Identification required : Yes
Trial period (days) : N/A

Tool architecture
Specify the technologies used in this tool

• Application: Stand alone tool

Page top

Target public
Defines the most appropriate type of communities for this tool

• SME
• Commercial CIEs

Specific sector : N/A

Spread
Information concerning the spread of this tool

General information : N/A
Used inside EU countries : N/A
Used outside EU countries : N/A

Level of detail
Specify the target kind of people for this tool based on its functionality

Management : N/A
Operational : N/A
Technical : N/A

Compliance to IT Standards
List the national or international standard this tool is compliant with

• ISO 17799 : COBRA ISO17799 Consultant : Checking compliance with the ISO 17799 security standard

Tool helps towards a certification
Specify whether the tool helps the company toward a certification according to a standard

• N/A

Training
Information about possible training courses for this tool

Course : N/A

Page top

Skills needed
Specify the skills needed to use and maintain the solution

• To install : Stand alone application, single installation
• To use : Easy to use, On-line help, can be used without the need for detailed security knowledge or expertise in using risk management software
• To maintain : No updates needed

Tool Support
Specify the kind of support the company provides for this product

Support : N/A

Organization processes integration
Describe user roles this tool supports

Supported Roles

• N/A

Intergration in Organization activities

• N/A

Interoperability with other tools
Specify available interfaces or other ways of integration with other tools

• N/A

Sector adapted knowledge databases supported
e-Security knowledge base : Specifically constructed to cover modern network based systems

• N/A

Flexibility of tool's database
Can the database be customized and adapted to client requirements?

• Core knowledge database : Module manager: change questions, countermeasures, profiles, reports, etc