Security risk assessment: toward a comprehensive practical risk management
by Danilo Valeros Bernardo
International Journal of Information and Computer Security (IJICS), Vol. 5, No. 2, 2012

Abstract: This paper introduces a unique approach to a more integrated security risk assessment (SRA). This is formalised based on the proven mathematical methods described in various articles in the literature and combined with the work developed by the author. Whilst the widely used qualitative frameworks were introduced by existing international standards, the approach presented in this paper provides a novel way of better managing security risks in organisations. It uses a combination of qualitative and ranking methods based on a distance-based approach. The successful implementation of this approach in one of the world's largest financial institutions provided an alternative and unconventional means of performing more practical integrated security risk management, in a manner consistent with the current set of standards and practices. The method used in this paper is more effective than the existing single-faceted methods available. It gauges the significance of each risk by ranking them and providing preferences based on users' perspectives. These are qualified and quantified to achieve more comprehensive and effective risk assessment results.

Online publication date: Sat, 30-Aug-2014

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Information and Computer Security (IJICS):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com