A meta-process for information security risk management

Authors:
Katerina Papadaki;Despina Polemi
Affiliations:
National Technical University of Athens & Bank of Greece, 3, Amerikis St., GR--10522, Athens, Greece.;University of Pireaus, 80, Karaoli & Dimitriou St., GR--18534, Piraeus, Greece
Venue:
International Journal of Electronic Security and Digital Forensics
Year:
2008

Citing 12
Cited 0

Managing Information Security in Healthcare - an Action Research Experience

Proceedings of the IFIP TC11 Fifteenth Annual Working Conference on Information Security for Global Information Infrastructures
Knowledge and Organization: A Social-Practice Perspective

Organization Science
Guide To Web Application And Platform Architectures (Springer Professional Computing)

Guide To Web Application And Platform Architectures (Springer Professional Computing)
Why we blog

Communications of the ACM - The Blogosphere
Tapping the power of text mining

Communications of the ACM - Privacy and security in highly dynamic systems
Managing Knowledge in Global Software Development Efforts: Issues and Practices

IEEE Software
Formalizing the evolution of virtual communities

Information Systems
Knowledge sharing behavior in virtual communities: The relationship between trust, self-efficacy, and outcome expectations

International Journal of Human-Computer Studies
Understanding knowledge sharing in virtual communities: an integration of social capital and social cognitive theories

Decision Support Systems
A social network-based system for supporting interactive collaboration in knowledge sharing over peer-to-peer network

International Journal of Human-Computer Studies
Information Technology Audits

Information Technology Audits
Web Services: Concepts, Architectures and Applications

Web Services: Concepts, Architectures and Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Information security risk management (ISRM) is a major concern of organisations worldwide. Although the number of existing ISRM methodologies is enormous, in practice several resources are invested by organisations in creating new ISRM methodologies in order to capture more accurately the risks of their complex information systems. This is a crucial knowledge-intensive process for organisations, but in most cases it is addressed in an ad hoc manner. The existence of a systematic approach for the development of new or improved ISRM methodologies would enhance the effectiveness of the process. In this paper, we propose a systematic meta-process for developing new, or improved ISRM methods. We also present the specifications for a collaboration and knowledge-sharing platform supporting a virtual intra-organisational cross-disciplinary team, which aims at improving its ISRM methodologies by adopting the proposed meta-process.