Towards a knowledge-sharing approach for Information Security Risk Management

Authors:
Katerina Papadaki;Nineta Polemi
Affiliations:
National Technical University of Athens & Bank of Greece;University of Pireaus
Venue:
Proceedings of the 2008 conference on Knowledge-Based Software Engineering: Proceedings of the Eighth Joint Conference on Knowledge-Based Software Engineering
Year:
2008

Citing 14
Cited 0

Managing Information Security in Healthcare - an Action Research Experience

Proceedings of the IFIP TC11 Fifteenth Annual Working Conference on Information Security for Global Information Infrastructures
Knowledge and Organization: A Social-Practice Perspective

Organization Science
Guide To Web Application And Platform Architectures (Springer Professional Computing)

Guide To Web Application And Platform Architectures (Springer Professional Computing)
Why we blog

Communications of the ACM - The Blogosphere
Information Security Risk Analysis

Information Security Risk Analysis
Tapping the power of text mining

Communications of the ACM - Privacy and security in highly dynamic systems
Managing Knowledge in Global Software Development Efforts: Issues and Practices

IEEE Software
Formalizing the evolution of virtual communities

Information Systems
Knowledge sharing behavior in virtual communities: The relationship between trust, self-efficacy, and outcome expectations

International Journal of Human-Computer Studies
Understanding knowledge sharing in virtual communities: an integration of social capital and social cognitive theories

Decision Support Systems
A social network-based system for supporting interactive collaboration in knowledge sharing over peer-to-peer network

International Journal of Human-Computer Studies
Information Technology Audits

Information Technology Audits
Analysis of modern IS security development approaches: towards the next generation of social and adaptable ISS methods

Information and Organization
Web Services: Concepts, Architectures and Applications

Web Services: Concepts, Architectures and Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Information security risk management (ISRM) is a major concern of organizations worldwide. Although the number of existing ISRM methodologies is enormous, in practice a lot of resources are invested by organizations in creating new ISRM methodologies in order to capture more accurately the risks of their complex information systems. This is a crucial knowledge-intensive process for organizations, but in most cases it is addressed in an ad hoc manner. The existence of a systematic approach for the development of new or improved ISRM methodologies would enhance the effectiveness of the process. In this paper we propose a systematic meta-process for developing new, or improved ISRM methods. We also present the specifications for a collaboration and knowledge-sharing platform supporting a virtual intra-organizational cross-disciplinary team, which aims at improving its ISRM methodologies by adopting the proposed meta-process.