Study of a Risk Management Model

Marn-Ling Shing ； Chen-Chi Shing ； Kuo-Lane Chen ； Huei Lee

《International Journal of Electronic Commerce Studies》 2卷1期 (2011/06) Pp. 67-76

並列摘要

Risk management has become an important issue in the information security area. This study proposes a Semi-Markov chain model to manage the information security risk. When the state information is not recognized as a normal state, the model can send a warning signal to the manager. A simulated model was used to validate the semi-Markov chain model.

並列關鍵字

Information Security Risk Management ； Information Security Assessment ； Information Security Modeling and Simulation ； Information Security Model Validation

參考文獻

R.K.J.R. Rainer, C.A. Snyder, and H.H. Carr, Risk analysis for information technology. Journal of Management Information Systems, 8 (1), p129-147, 1991.

The Committee on National Security Systems (CNSS), CNSS Instruction, No. 4009, 2003. Retrieved October 21, 2010, from http://www.cnss.gov/Assets/pdf/cnssi_4009.pdf.

Symantec, U.S. Information Security Law, Part Four. Retrieved October 21, 2010, from http://www.symantec.com/connect/articles/us-information-security-law-part-four

M. Bishop, Computer Security: Art and Science. Boston, MA: Addison-Wesley, 2003.

M. Keil, A. Tiwana, and A. Bush, Reconciling user and project manager perceptions of IT project risk: a Delphi study. Information Systems Journal, 12(2), p103-119, 2002.