Document Type
Conference Proceeding
Publication Date
2012
Abstract
The widespread use of information technology transforms businesses continuously and rapidly. Information technology introduces new threats to organizations as well. Risk analysis is an important tool in order to make correct decisions and to deal with cyber threats. Identification and valuation of assets is a crucial process that must be performed in risk analyses. Without properly identified and valued assets, the results of risk analyses lead to wrong decisions. Wrong decisions on information security may directly affect corresponding business processes. There are some finished and applied methods in literature for asset identification and valuation; however these methods are complicated and are not suitable for practical information security management projects. In this paper, a hierarchy based asset valuation method is proposed. Our method is intended to minimize the common mistakes that were done during Information Security Management Projects. The application of the method has not been performed yet; however it is thought that it can ease the processes and reduce the number of errors.
College/Unit
College of Arts, Sciences and Technology
Publication or Event Title
International Conference on Information Society
Recommended Citation
Karabacak, B., & Tatar, U. (2012). An Hierarchical Asset Valuation Method for Information Security Risk Analysis. International Conference on Information Society Retrieved from https://fuse.franklin.edu/facstaff-pub/42