Affiliation:
1. Athens University of Economics & Business, Greece
2. Bournemouth University, United Kingdom
Abstract
Organizations are exposed to threats that increase the risk factor of their ICT systems. The assurance of their protection is crucial, as their reliance on information technology is a continuing challenge for both security experts and chief executives. As risk assessment could be a necessary process in an organization, one of its deliverables could be utilized in addressing threats and thus facilitate the development of a security strategy. Given the large number of heterogeneous methods and risk assessment tools that exist, comparison criteria can provide better understanding of their options and characteristics and facilitate the selection of a method that best fits an organization's needs. This article aims to address the problem of selecting an appropriate risk assessment method to assess and manage information security risks, by proposing a set of comparison criteria, grouped into four categories. Based upon them, it provides a comparison of the 10 popular risk assessment methods that could be utilized by organizations to determine the method that is more suitable for their needs. Finally, a case study is presented to demonstrate the selection of a method based on the proposed criteria.
Publisher
Association for Computing Machinery (ACM)
Subject
General Computer Science,Theoretical Computer Science
Reference69 articles.
1. Model-based risk assessment to improve enterprise security
2. Addressing information security risks by adopting standards;Bassil Mohammad Walid;Int. J. Info. Secur. Sci.,2013
3. M. A. Amutio J. Candau and J. Mañas. 2014. MAGERIT—Version 3 methodology for information systems risk analysis and management. Book I—The Method Ministerio de Administraciones Publicas. M. A. Amutio J. Candau and J. Mañas. 2014. MAGERIT—Version 3 methodology for information systems risk analysis and management. Book I—The Method Ministerio de Administraciones Publicas.
Cited by
41 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献