Components of a multi-perspective modeling method for designing and managing IT security systems

Abstract

Information technology (IT) security design and management are a major concern and substantial challenge for IT management. Today's highly complex business and technological environments and the need to effectively communicate and justify IT security requirements and controls demand methodical support. The modeling method presented in this paper addresses this demand. The method is based on the assumption that enriched enterprise models integrating technological, business, organizational and strategic aspects provide an effective foundation for developing and managing IT security systems and facilitating communication and understanding between stakeholders. The proposed modeling method for designing and managing IT security in organizations accounts for different perspectives and is based on multi-perspective enterprise modeling. The core components of the method, based on analysis of requirements at different levels of abstraction, are: modeling language concepts specifically designed to address security issues, process models that guide the use of the resulting language, and a modeling environment. The method facilitates elaborate representations of the various aspects of IT security at different levels of abstraction and covers the entire lifecycle of IT security systems. It not only supports multi-perspective requirement analysis and design but also enables monitoring and analysis of IT security at runtime. The presented artifact is evaluated with recourse to a research method that enables the configuration of multi-criteria justification procedures.

Intelligent Decision-Making Model of Enterprise Management Based on Random Forest Algorithm

“…Goldstein and Frank pointed out that the rapid development of information network has changed the way of information transmission from hierarchical to horizontal, not only leading units can make decisions but also executive units can make quick decisions based on real-time conditions. These all bring new challenges to the management decision-making of modern enterprises [17]. Douglas et al believe that the architecture of business intelligence refers to the main framework for providing business intelligence system applications by identifying and understanding the flow process of data in the system and the application process of data in the enterprise [18].…”

Global Crises and the Role of BISE

“…This has been known for some time. Various methods for risk analysis and damage control are based on conceptual models or on enterprise models in particular (Neiger et al 2006;Strecker et al 2011;Goldstein and Frank 2016). Since none of these methods accounts for the specific threats generated by a global pandemic, it might appear obvious to extend them with further concepts.…”

Information security management framework for small and medium enterprise

“…P. Michelberger et al (Michelberger, & Labodi, 2012) proposes a holistic and process centered enterprise security model; however, there are no suitable tools to model all components of the framework. Different aspects of IT security at different levels of abstraction, including the entire lifecycle of IT security systems (Goldstein, & Frank, 2016) have to be considered for deep modeling of security in enterprise analysis.…”