Title
IT security risk management
Abstract
Threats (accidental or malicious) are potential causes of unwanted events that can result in harm to the assets of the organization and may affect the profit and/or a company reputation. A risk management process (qualitative or quantitative) is needed in order to identify, describe, and analyze the possible vulnerabilities that could affect the company's assets. In this paper, we present the quantitative indexes that are used to measure risk and introduce the scenario-based qualitative approaches via attack trees.
Year
DOI
Venue
2008
10.1145/1593105.1593203
ACM Southeast Regional Conference
Keywords
Field
DocType
potential cause,possible vulnerability,risk management,information security,quantitative index,attack tree,unwanted event,information technology,it security risk management,roi,risk management process,company reputation,scenario-based qualitative approach,indexation,it security,profitability
Financial risk management,Asset (computer security),Computer security,Computer science,Risk factor (computing),Risk analysis (engineering),Risk management,IT risk management,Threat,Factor analysis of information risk,Security management
Conference
Citations 
PageRank 
References 
3
0.37
40
Authors
1
Name
Order
Citations
PageRank
Mohammed Ketel1136.84