NDLI: Business Process-Based Information Security Risk Assessment

Content Provider	IEEE Xplore Digital Library
Author	Khanmohammadi, K. Houmb, S.H.
Copyright Year	2010
Abstract	Limited information security budget in organizations make it necessary to effectively prioritize among security requirements. The goal is to make the most out of the available budget and to achieve a balanced overall security level. This leads to maximize the investment outcome. Many existing information security risk assessment approaches identify and assess risks to critical assets and are asset-driven approaches. These are limited in that it is hard to keep track of dependencies between assets and to produce realistic estimates of their values to an organization. We present a new security risk assessment approach focusing on business goals rather than assets and the processes supporting or contributing to these goals. Risks are identified and evaluated on a business process level and aggregated over all such processes depending on their criticality, role and importance for the organization as a whole. We illustrate our approach using examples from the banking industry, as well as discuss how our approach deals with some of the ambiguities involved in expert intensive and asset-driven information security risk assessment.
Starting Page	199
Ending Page	206
File Size	636864
Page Count	8
File Format	PDF
ISBN	9781424484843
DOI	10.1109/NSS.2010.37
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-09-01
Publisher Place	Australia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Business process Process control Information security Risk assessment Companies Information management Risk management Process management
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Security Risk Assessment Model for Business Process Deployment in the Cloud

Integrating Security Risk Management into Business Process Management for the Cloud

A roadmap to risk-aware business process management

Integration of an Ontological Information Security Concept in Risk Aware Business Process Management

Research on Business Intelligence for Securities Companies' Risk Management

A reference model for risk-aware business process management

An aspect oriented process based approach to information risk management.

Information security on RFID based power meter system

Rethinking risk-based information security

Business Process-Based Information Security Risk Assessment

Similar Documents

A Security Risk Assessment Model for Business Process Deployment in the Cloud

Integrating Security Risk Management into Business Process Management for the Cloud

A roadmap to risk-aware business process management

Integration of an Ontological Information Security Concept in Risk Aware Business Process Management

Research on Business Intelligence for Securities Companies' Risk Management

A reference model for risk-aware business process management

An aspect oriented process based approach to information risk management.

Information security on RFID based power meter system

Rethinking risk-based information security

Business Process-Based Information Security Risk Assessment