INFORMATION SECURITY RISK ASSESSMENT: BAYESIAN PRIORITIZATION FOR AHP GROUP DECISION MAKING
INTERNATIONAL JOURNAL OF INNOVATIVE COMPUTING INFORMATION AND CONTROL, vol.8, no.11, pp.8019-8032, 2012 (SCI-Expanded, Scopus)
- Publication Type: Article / Article
- Volume: 8 Issue: 11
- Publication Date: 2012
- Journal Name: INTERNATIONAL JOURNAL OF INNOVATIVE COMPUTING INFORMATION AND CONTROL
- Journal Indexes: Science Citation Index Expanded (SCI-EXPANDED), Scopus
- Page Numbers: pp.8019-8032
- Keywords: Information security, Risk assessment, Analytic hierarchy process (AHP), Group decision making (GDM), Bayesian prioritization procedure (BPP)
- Dokuz Eylül University Affiliated: Yes
Abstract
Increasing complexity of risk management requires the use of more flexible approaches to measure information security risk. Adapting complex risk analysis tools in today's information systems is a very difficult task due to the shortage of reliable data. Analytic Hierarchy Process group decision making (AHP-GDM) offers a technical support for risk analysis by taking the judgements of managers and systematically calculating the relative risk values. This paper presents how Bayesian Prioritization procedure (BPP) provides a more effective way of risk assessment than proposed by the conventional approaches used in AHP-GDM.