Fuzzy Mathematical Model for Designing Cybersecurity Management Bodies in Strategic Planning

Abstract

It is necessary for the design of organizational structure of cybersecurity systems or information security systems to meet the basic corporate goals and objectives. Thus, although cyber security is only an element of information security, it is its most important part. For that reason, it is essential for the organizational structure to be constantly perfected. The analysis of strengths, weaknesses, opportunities and threats (SWOT) is a method to formulate the strategy. The SWOT analysis successfully provides the key factors of the problem. In recent years, the multiple criteria decision making (MCDM) has removed some of the deficiencies. However, the nature of these decisions is usually very complex and using crisp data is not suitable. This paper presents a modification of the Saaty-s scale, in which fuzzy numbers have been used for determining weight values of criteria and alternatives. The method described here takes into account the level of uncertainty of the decision maker. After the application of the AHP method in this way, the values of the functions criteria for each considered alternative are obtained. FA'WOT is a hybrid method combining the well-known SWOT analysis and the Fuzzy AHP. This model is used in determining the development strategy for cybersecurity management bodies.