Browse By Repository:

 
 
 
   

An Integrated Approach in Risk Management Process for Identifying Information Security Threats using Medical Research Design

Ahmad, Rabiah (2012) An Integrated Approach in Risk Management Process for Identifying Information Security Threats using Medical Research Design. Journal of Information Assurance and Security. ISSN 1554-1010

[img]
Preview
PDF
JIASPaper_181.PDF

Download (247Kb)

Abstract

In this paper, we attempt to introduce a new method for performing risk analysis studies by effectively adopting and adapting medical research design namely a prospective cohort study based survival analysis approach into risk management process framework. Under survival analysis approach, a method which is known as Cox Proportional Hazards (PH) Model will be applied in order to identify potential information security threats. The risk management process in this research will be based on Australian/New Zealand Standard for Risk Management (AS/NZS ISO 31000:2009). AS/NZS ISO 31000:2009 provides a sequencing of the core part of the risk management process namely establishing the context, risk identification, risk analysis, risk evaluation and risk treatment. Moreover, it seems that the integration of risk management process with medical approach indeed brings very useful new insights. Thus, the contribution of the paper will be introducing a new method for performing a risk analysis studies in information security domain.

Item Type: Article
Subjects: Z Bibliography. Library Science. Information Resources > ZA Information resources > ZA4050 Electronic information resources
Depositing User: Prof Madya Dr. Rabiah Ahmad
Date Deposited: 29 May 2012 03:06
Last Modified: 28 May 2015 02:34
URI: http://eprints.utem.edu.my/id/eprint/3291

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year