Institute of Information Theories and Applications FOI ITHEA
Security becomes more and more important and companies are aware that it has become a
management problem. It’s critical to know what are the critical resources and processes of the company and their
weaknesses. A security audit can be a handy solution. We have developed BEVA, a method to critically analyse
the company and to uncover the weak spots in the security system. BEVA results in security scores for each
security factor and also in a general security score. The goal is to increase the security score Ss to a postulated
level by focusing on the critical security factors, those with a low security score.