Priority indexing model for evaluating and analysing organisations' information security systems

Authors:
Abdel Nasser H. Zaied
Affiliations:
College of Computers and Informatics, Zagazig University, Egypt
Venue:
International Journal of Information Systems and Change Management
Year:
2009

Citing 7
Cited 0

Building secure software: how to avoid security problems the right way

Building secure software: how to avoid security problems the right way
G-8 Collaborative Initiatives and the Digital Divide: Readiness for E-government

HICSS '02 Proceedings of the 35th Annual Hawaii International Conference on System Sciences (HICSS'02)-Volume 5 - Volume 5
A Management Perspective on Risk of Security Threats to Information Systems

Information Technology and Management
A study on e-Taiwan information system security classification and implementation

Computer Standards & Interfaces
A framework of security and safety checking for internet-based control systems

International Journal of Information and Computer Security
A new assessment and improvement model of risk propagation in information security

International Journal of Information and Computer Security
Information security considerations in IS/IT outsourcing projects: a descriptive case study of two sectors

International Journal of Information Management: The Journal for Information Professionals

Quantified Score

Hi-index	0.00

Visualization

Abstract

Information technology (IT) has come to play an important and vital role in any organisation. As a consequence, security has become an essential aspect of IT and the negative impacts of security threats will affect not only systems or individuals but also organisations and society. In this paper, a priority indexing model (PIM) was proposed to evaluate organisation's information security system and to calculate a development priority index that can be used as an indicator for development needs. To examine the validity of the proposed model, the information security system in Ministry of Education (MOE) in the State of Kuwait was evaluated to determine the overall development priority indexes. The results showed that the proposed model can assist decision makers to consider different criteria and indicators before committing to a particular choice of security system development or to evaluate any existing security system. Finally, the general development priority index derived in this work can be used as a reference for information security planning and management process improvements.