The Method of Assessing the Level of Compliance of Divisions of the Complex Network for the Corporate Information Security Policy Indicators
| Title | The Method of Assessing the Level of Compliance of Divisions of the Complex Network for the Corporate Information Security Policy Indicators |
| Publication Type | Conference Paper |
| Year of Publication | 2019 |
| Authors | Kozlov, Aleksandr, Noga, Nikolai |
| Conference Name | 2019 Twelfth International Conference "Management of large-scale system development" (MLSD) |
| Publisher | IEEE |
| ISBN Number | 978-1-7281-1730-0 |
| Keywords | Collaboration, comparative assessment, complex network, complex networks, compliance level assessment, corporate information security policy indicators, corporate information security policy requirements, corporate information system, criteria, decision making, decision-making, Games, Information security, Information services, Information systems, maximin and minimax procedures, Organizations, Policy Based Governance, policy-based governance, pubcrawl, ranking of the values of indicators, risk management, risk minimization, security of data, Standards organizations, the accounts of the Board, the Hamming distance, the ratio of Pareto |
| Abstract | The method of assessment of degree of compliance of divisions of the complex distributed corporate information system to a number of information security indicators is offered. As a result of the methodology implementation a comparative assessment of compliance level of each of the divisions for the corporate information security policy requirements may be given. This assessment may be used for the purpose of further decision-making by the management of the corporation on measures to minimize risks as a result of possible implementation of threats to information security. |
| URL | https://ieeexplore.ieee.org/document/8911052 |
| DOI | 10.1109/MLSD.2019.8911052 |
| Citation Key | kozlov_method_2019 |
- Information systems
- the ratio of Pareto
- the Hamming distance
- the accounts of the Board
- Standards organizations
- security of data
- risk minimization
- risk management
- ranking of the values of indicators
- pubcrawl
- policy-based governance
- Policy Based Governance
- Organizations
- maximin and minimax procedures
- collaboration
- Information services
- information security
- Games
- decision-making
- Decision Making
- criteria
- corporate information system
- corporate information security policy requirements
- corporate information security policy indicators
- compliance level assessment
- complex networks
- complex network
- comparative assessment