NDLI: Risk Mitigation Decisions for IT Security

Please wait, while we are loading the content...

ACM Transactions on Management Information Systems (TMIS) : Volume 7

ACM Transactions on Management Information Systems (TMIS) : Volume 6

ACM Transactions on Management Information Systems (TMIS) : Volume 5

Issue 4(Special Issue on Business Process Intelligence), March 2015

Issue 3(Special Issue on Complexity of Systems Evolution: Requirements Engineering Perspective), January 2015

Issue 2, July 2014

Issue 1, April 2014

Septic Shock Prediction for Patients with Missing Data

Postmarketing Drug Safety Surveillance Using Publicly Available Health-Consumer-Contributed Content in Social Media

Predicting Stability of Open-Source Software Systems Using Combination of Bayesian Classifiers

Building Online Trust in a Culture of Confucianism: The Impact of Process Flexibility and Perceived Control

Risk Mitigation Decisions for IT Security

ACM Transactions on Management Information Systems (TMIS) : Volume 4

ACM Transactions on Management Information Systems (TMIS) : Volume 3

ACM Transactions on Management Information Systems (TMIS) : Volume 2

ACM Transactions on Management Information Systems (TMIS) : Volume 1

Risk Mitigation Decisions for IT Security

Content Provider	ACM Digital Library
Author	Yeo, M. Lisa Rolland, Erik Ulmer, Jackie Rees Patterson, Raymond A.
Copyright Year	2014
Abstract	Enterprises must manage their information risk as part of their larger operational risk management program. Managers must choose how to control for such information risk. This article defines the flow risk reduction problem and presents a formal model using a workflow framework. Three different control placement methods are introduced to solve the problem, and a comparative analysis is presented using a robust test set of 162 simulations. One year of simulated attacks is used to validate the quality of the solutions. We find that the math programming control placement method yields substantial improvements in terms of risk reduction and risk reduction on investment when compared to heuristics that would typically be used by managers to solve the problem. The contribution of this research is to provide managers with methods to substantially reduce information and security risks, while obtaining significantly better returns on their security investments. By using a workflow approach to control placement, which guides the manager to examine the entire infrastructure in a holistic manner, this research is unique in that it enables information risk to be examined strategically.
Starting Page	1
Ending Page	21
Page Count	21
File Format	PDF
ISSN	2158656X
e-ISSN	21586578
DOI	10.1145/2576757
Volume Number	5
Issue Number	1
Journal	ACM Transactions on Management Information Systems (TMIS)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-04-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Controls Information risk management Workflows
Content Type	Text
Resource Type	Article
Subject	Management Information Systems Computer Science

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Ranking information security controls by using fuzzy analytic hierarchy process

IT Audit: A Critical Business Process

Security Models: Refocusing on the Human Factor

Cloud Computing: Key IT-Related Risks and Mitigation Strategies for Consideration by IT Security Practitioners

Understanding Insecure IT: Practical Risk Assessment

Managing Enterprise Security Risk with NIST Standards

Method to Select Effective Risk Mitigation Controls Using Fuzzy Outranking

Security Engineering in IT Governance for University Information System

Information security and risk management

Risk Mitigation Decisions for IT Security

Similar Documents

Ranking information security controls by using fuzzy analytic hierarchy process

IT Audit: A Critical Business Process

Security Models: Refocusing on the Human Factor

Cloud Computing: Key IT-Related Risks and Mitigation Strategies for Consideration by IT Security Practitioners

Understanding Insecure IT: Practical Risk Assessment

Managing Enterprise Security Risk with NIST Standards

Method to Select Effective Risk Mitigation Controls Using Fuzzy Outranking

Security Engineering in IT Governance for University Information System

Information security and risk management

Risk Mitigation Decisions for IT Security