Comparative Study of Information Security Risk Assessment Frameworks

Abstract

With the increasing need of securing organization's computing environment, a security risks management framework is essentially needed that define the security risks management process accurately. In this regard, numerous risks management frameworks have been developed, and many more are emerging every day. They all have very different perspectives and addressing problems differently, though with the same basic goal of risks mitigation in direction of information security. Information is a critical asset for every organization and hence development and implementation of strategic plans for information security risks mitigation should be an essential part of every organizations operation. This paper compares and analyzes the different activities, inputs and outputs required by each information security risk assessment models. The primary goal of the paper is to identify which information security risk assessment model assesses information security risk effectively. The comparative study helps in evaluating the models' applicability to an organization and their specific needs.

Implementing IT Risk in ITSM Tools using Octave Allegro Method Based at ITSMProject

“…For future work, there is need of development of an operation-based Information Security Risks Management framework that should be simple and clearly defined the security risks management process [13]. This study aims to minimize and manage the impact of potential risks.…”