A meta-process for information security risk management. (1st December 2008)

• Record Type: Journal Article
• Authors: Papadaki, Katerina; Polemi, Despina
• Is Part Of: International journal of electronic security and digital forensics. Volume 1:Number 4(2008)
• Page Start: 336
• Page End: 343
• Publication Date: 2008-12-01
• Subjects: information security -- knowledge management -- risk management -- collaboration -- virtual teams -- intra-organisational teams -- cross-disciplinary teams -- knowledge sharing; Computer crimes -- Periodicals; Computer crimes -- Investigation -- Periodicals; Computer security -- Periodicals; Electronic commerce -- Law and legislation -- Periodicals; Information warfare -- Periodicals; 005.805
• Languages: English
• ISSNs: 1751-911X

Abstract

Information security risk management (ISRM) is a major concern of organisations worldwide. Although the number of existing ISRM methodologies is enormous, in practice several resources are invested by organisations in creating new ISRM methodologies in order to capture more accurately the risks of their complex information systems. This is a crucial knowledge-intensive process for organisations, but in most cases it is addressed in an ad hoc manner. The existence of a systematic approach for the development of new or improved ISRM methodologies would enhance the effectiveness of the process. In this paper, we propose a systematic meta-process for developing new, or improved ISRM methods. We also present the specifications for a collaboration and knowledge-sharing platform supporting a virtual intra-organisational cross-disciplinary team, which aims at improving its ISRM methodologies by adopting the proposed meta-process.