A VIKOR technique based on DEMATEL and ANP for information security risk control assessment

  • Authors:

  • Yu-Ping Ou Yang;How-Ming Shieh;Gwo-Hshiung Tzeng

  • Affiliations:

  • Department of Business Administration, National Central University, 300 Chung-da Road, Chung-Li City 320, Taiwan;Department of Business Administration, National Central University, 300 Chung-da Road, Chung-Li City 320, Taiwan and Department of Information Management, National Central University, 300 Chung-da ...;Department of Information Management, Kainan University, No. 1, Kainan Road, Luchu, Taoyuan 338, Taiwan and Institute of Management of Technology, National Chiao Tung University, 1001 Ta-Hsueh Roa ...

  • Venue:
  • Information Sciences: an International Journal
  • Year:
  • 2013

Quantified Score

Hi-index 0.07

Visualization

Abstract

As companies and organizations have grown to rely on their computer systems and networks, the issue of information security management has become more significant. To maintain their competitiveness, enterprises should safeguard their information and try to eliminate the risk of information being compromised or reduce this risk to an acceptable level. This paper proposes an information security risk-control assessment model that could improve information security for these companies and organizations. We propose an MCDM model combining VIKOR, DEMATEL, and ANP to solve the problem of conflicting criteria that show dependence and feedback. In addition, an empirical application of evaluating the risk controls is used to illustrate the proposed method. The results show that our proposed method can be effective in helping IT managers validate the effectiveness of their risk controls.