Information Security Management: ANP Based Approach for Risk Analysis and Decision Making

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F60460709%3A41110%2F16%3A70770" target="_blank" >RIV/60460709:41110/16:70770 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.7160/aol.2016.080102" target="_blank" >http://dx.doi.org/10.7160/aol.2016.080102</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.7160/aol.2016.080102" target="_blank" >10.7160/aol.2016.080102</a>

Result language
angličtina
Original language name
Information Security Management: ANP Based Approach for Risk Analysis and Decision Making
Original language description
In information systems security, the objectives of risk analysis process are to help to identify new threats and vulnerabilities, to estimate their business impact and to provide a dynamic set of tools to control the security level of the information system. The identification of risk factors as well as the estimation of their business impact require tools for assessment of risk with multi-value scales according to different stakeholders’ point of view. Therefore, the purpose of this paper is to model risk analysis decision making problem using semantic network to develop the decision network and the Analytical Network Process (ANP) that allows solving complex problems taking into consideration quantitative and qualitative data. As a decision support technique ANP also measures the dependency among risk factors related to the elicitation of individual judgement. An empirical study involving the Forestry Company is used to illustrate the relevance of ANP.
Czech name
—
Czech description
—

Type
J<sub>SC</sub> - Article in a specialist periodical, which is included in the SCOPUS database
CEP classification
—
OECD FORD branch
10103 - Statistics and probability

Publication year
2016
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)