INFORMATION SECURITY RISK ASSESSMENT: BAYESIAN PRIORITIZATION FOR AHP GROUP DECISION MAKING


Eren-Dogu Z. F., Celikoglu C. C.

INTERNATIONAL JOURNAL OF INNOVATIVE COMPUTING INFORMATION AND CONTROL, vol.8, no.11, pp.8019-8032, 2012 (SCI-Expanded, Scopus)

  • Publication Type: Article / Article
  • Volume: 8 Issue: 11
  • Publication Date: 2012
  • Journal Name: INTERNATIONAL JOURNAL OF INNOVATIVE COMPUTING INFORMATION AND CONTROL
  • Journal Indexes: Science Citation Index Expanded (SCI-EXPANDED), Scopus
  • Page Numbers: pp.8019-8032
  • Keywords: Information security, Risk assessment, Analytic hierarchy process (AHP), Group decision making (GDM), Bayesian prioritization procedure (BPP)
  • Dokuz Eylül University Affiliated: Yes

Abstract

Increasing complexity of risk management requires the use of more flexible approaches to measure information security risk. Adapting complex risk analysis tools in today's information systems is a very difficult task due to the shortage of reliable data. Analytic Hierarchy Process group decision making (AHP-GDM) offers a technical support for risk analysis by taking the judgements of managers and systematically calculating the relative risk values. This paper presents how Bayesian Prioritization procedure (BPP) provides a more effective way of risk assessment than proposed by the conventional approaches used in AHP-GDM.