Information Asset Profiling

Stevens, James; Caralli, Richard A.; Willke, Bradford J.

doi:10.21236/ada441305

Cited by 11 publications

(10 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Salah satu cara profilisasi aset informasi dapat dilakukan dengan menggunakan Information Asset Profiling (IAP) [4]. Tujuan utama dari IAP adalah untuk memberikan definisi umum yang jelas pada setiap aset informasi.…”

Section: Pendahuluanunclassified

See 1 more Smart Citation

Kajian Profilisasi Aset Informasi Menggunakan Information Asset Profiling Dan Kuantifikasi Nilai Ekonomisnya Berdasarkan Analisis Risiko Pada Industri Rumah Sakit

Ranti¹,

Wicaksono

2012

Jurnal Sistem Informasi

View full text Add to dashboard Cite

AbstrakSalah satu isu utama dalam industri kesehatan adalah kurangnya manajemen yang tepat dalam aset informasi. Hilangnya aset informasi dapat diklasifikasikan sebagai bencana yang dapat mengakibatkan kerugian finansial. Seringkali, ini kerugian keuangan sulit untuk menghitung karena nilai ekonomi dari aset informasi tidak diukur. Penelitian ini akan membahas informasi manajemen aset di industri kesehatan menggunakan Steven Informatian Profil Aset (IAP), khususnya pada proses bisnis inti. Kuantifikasi nilai ekonomi aset informasi dilakukan melalui analisis risiko menggunakan diagram tulang ikan. Ini adalah hasil pemetaan risiko dalam kategori Ranti yang Generik / TI Nilai Bisnis, dikombinasikan dengan empat Su model dampak bisnis (keuangan, operasional, pelanggan, dan karyawan). Hal ini bertujuan untuk membantu menentukan metrik yang menunjukkan kuantifikasi kerugian finansial yang mungkin timbul dari kehilangan informasi aset. Hasil penelitian ini menunjukkan bahwa IAP dapat digunakan sebagai metode manajemen informasi aset, serta praktek terbaik dalam penerapan awal manajemen risiko. Penelitian ini juga menemukan bahwa nilai aset informasi tidak selalu sesuai dengan nilai positif ekonominya karena tergantung pada tingkat pemulihan data di masing-masing aset. Kata Kunci: aset informasi, information asset profiling (IAP), kuantifikasi aset informasi,manajemen risiko AbstractOne primary issue in healthcare industry is the lack of proper management in its information asset. The loss of information asset can be classified as a disaster that might lead to financial loss. Often, this financial loss is hard to calculate since the economic value of the information asset is not quantified. This study will address information asset management in healthcare industry using Steven's Informatian Asset Profiling (IAP), specifically on its core business process. Quantification of the economic value of information asset is performed through risk analysis using fishbone diagram. It is the mapping result of risks categories in Ranti's Generic IS/IT Business Value, combined with Su's four models of business impact (financial, operational, customer, and employee). It aims to help determining quantification metrics which shows financial loss that might result from information asset loss. The result of this study shows that IAP can be used as a method of information asset management, as well as the best practice in the early application of risk management. The study also finds that information asset value does not always correspond positively with its economic value as it depends on the level of data recovery in each asset.

show abstract

Section: Pendahuluanunclassified

“…Salah satu cara dalam melakukan kuantifikasi nilai ekonomis aset informasi adalah dengan menggunakan teknik analisis risiko [4] [10] [11]. Pendekatan ini melihat nilai ekonomis aset informasi dari kemungkinan risiko kerugian finansial yang timbul akibat hilangnya aset informasi.…”

Section: Hasil Dan Pembahasanunclassified

Kajian Profilisasi Aset Informasi Menggunakan Information Asset Profiling Dan Kuantifikasi Nilai Ekonomisnya Berdasarkan Analisis Risiko Pada Industri Rumah Sakit

Ranti¹,

Wicaksono

2012

Jurnal Sistem Informasi

View full text Add to dashboard Cite

show abstract

“…An example of a business driver that impacts legal statements is the concept of information asset, which is information of value (e.g., patient records, intellectual property, or customer information) that is owned and/or used by an organization and needs to be protected [28].…”

Section: Exposure Of Business Policies and Objectivesmentioning

confidence: 99%

Evolution of legal statements on the web

Kienle

Vasiliu

2008

2008 10th International Symposium on Web Site Evolution

View full text Add to dashboard Cite

In this paper we propose to study the evolution of legal statements that can be found in web sites. Legal statements are an important part of each web site because they can be seen as a contract between the owner of the site and its users. For example, a site's privacy policy explains what kind of data is collected from users by the operator and how it is processed. Operators use terms of use to put restrictions on the conduct of users. In this paper we describe our proposal for a research agenda and methodology that analyzes the evolution of legal statements on the web. The research agenda argues that studying the content of legal statements and how they change over time allows to analyze and understand the evolution of the web from different viewpoints. Specifically, changing legal statements allow to identify emerging legal developments, to expose shifting business objectives, and to track the balance of power between operators and users.Our suggested methodology proposes to obtain historical snapshots of web sites available in the Internet Archive, to group them into different classes, and to analyze the content of the legal document as well as to compute metrics such as size and readability scores. The obtained data can then be used to formulate hypotheses about the evolution of certain characteristics of the web. We discuss a pilot study that instantiates our methodology. This study is based on five snapshots of 15 different web sites, and it shows that the methodology is feasible and can generate meaningful results.

show abstract

“…This is driven by the difficultly to quantify the value of the decisions unless provided a given static context. Standardized identification, definition, and documentation of information assets (and their value) is required when attempting to unravel the information interdependencies that often exist in large organizations [17]. Structured documentation provides the commander with visibility of where important information assets are located and the role that each information asset typically plays in support of the mission.…”

Section: B Data Versus Informationmentioning

confidence: 99%

“…Information asset ownership is frequently assigned in organizations without regard to who created the information or where it originated. These issues are often irrelevant as long as the ownership of the information asset is established, the owner has responsibility and authority to perform ownership duties, and accountability is enforced [17]. In the complex domain of military cyber information flow, the roles and responsibilities of each group, by necessity, do not adhere to the traditional definition.…”

Section: Information Production Ownership and Consumptionmentioning

confidence: 99%

Towards an Information Asset-Based Defensive Cyber Damage Assessment Process

Grimaila

Fortson

2007

2007 IEEE Symposium on Computational Intelligence in Security and Defense Applications

View full text Add to dashboard Cite

The use of computers and communication technologies to enhance Command and Control (C2) processes has yielded enormous benefits in military operations. Commanders are able to make higher quality decisions by accessing a greater number of information resources, obtaining more frequent updates from their information resources, and by correlation between, and across, multiple information resources to reduce uncertainty in the battlespace. However, these benefits do not come without a cost. The reliance on technology results in significant operational risk that is often overlooked and is frequently underestimated. In this researchin-progress paper, we discuss our initial findings in our efforts to improve the defensive cyber battle damage assessment process within US Air Force networks. We have found that the lack of a rigorous, well-documented, information asset-based risk management process results in significant uncertainty and delay when assessing the impact of an information incident.

show abstract

Information Asset Profiling

Cited by 11 publications

References 2 publications

Kajian Profilisasi Aset Informasi Menggunakan Information Asset Profiling Dan Kuantifikasi Nilai Ekonomisnya Berdasarkan Analisis Risiko Pada Industri Rumah Sakit

Kajian Profilisasi Aset Informasi Menggunakan Information Asset Profiling Dan Kuantifikasi Nilai Ekonomisnya Berdasarkan Analisis Risiko Pada Industri Rumah Sakit

Evolution of legal statements on the web

Towards an Information Asset-Based Defensive Cyber Damage Assessment Process

Contact Info

Product

Resources

About