Developing A Hybrid Model By Integrating Informative Parameters In Information Security Risk Analysis

Ahmad, Rabiah and Hussin, Burairah and Hasan Basari, Abd Samad and Yusof, Robiah and Ismail, Zuraini (2013) Developing A Hybrid Model By Integrating Informative Parameters In Information Security Risk Analysis. Project Report. UTeM, Melaka, Malaysia. (Submitted)

Text (Full Text) Developing A Hybrid Model By Integrating Informative Parameters in Information Security Risk Analysis.pdf - Submitted Version Restricted to Registered users only Download (1MB)

Abstract

Information security has become an essential entity for government, private and public organizations as organizations across the globe conduct business in an interconnected and information rich environment. Hence, organizations wanting to eliminate the possible risks in their organization by conducting information security risk assessment (ISRA). The existence of numerous number of different types of risk assessment methods, standards, guidelines and specifications readily available caused organizations faced with the daunting task in determining the most suitable method that would augur well in meeting their needs. Although each of these ISRA methodologies has been developed has different objectives, steps, structure and level of application, but they still having mutual features of the same kind of information with a slight difference in form. Generally, organizations need to make comparisons between methodologies and decide on the best due to inexistence of agreed reference benchmark in ISRA methodologies. This tedious process leads to unwarranted time, money and energy consumption. Hence, conceptual framework of info-structure for ISRA was developed by comparing and analyzing six methodologies which are currently available. This paper suggests an information accumulation structure model for ISRA that was developed by deploying a questionnaire using close-ended questions administrated to a group of information security practitioners at Malaysia (N=80). The purpose of the survey was carried out is to strengthen and add more relevant additional features to existing framework since it was developed based on secondary data. The accumulation (collective) information structure model for ISRA aims to assist organizations in getting a general view of ISRA flow, gathering information on the requirements to be met before risk assessment can be conducted successfully. This model can be conveniently used by organizations to complete all the required planning as well as the selection of suitable methods to complete the ISRA.

Actions (login required)

View Item