Metrics analysis of risk profile: A perspective on business aspects

Ibnugraha, Prajna Deshanta; Nugroho, Lukito Edi; Santosa, Paulus Insap

doi:10.1109/icoiact.2018.8350675

Cited by 6 publications

(5 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This study classifies the respondents based on the job position, length of job experience, managerial position experience, and educational background. In the length of job experience, we determine five years as the minimum time for expert respondents [21]. The background of the respondents is shown in Figure 5.…”

Section: Resultsmentioning

confidence: 99%

“…The new metrics for identifying the risk of an information security incident can be developed according to the characteristic of the institution or enterprise. There are several methods for identifying the new metrics, such as validity analysis [21] and reliability analysis [22], [23]. This study proposes a different environment from the previous study in identifying the metrics.…”

Section: Fig 1 the Metrics Of Cvssmentioning

confidence: 99%

See 1 more Smart Citation

The Reliability Analysis for Information Security Metrics in Academic Environment

Ibnugraha

Satria

Nagari

et al. 2023

JOIV : Int. J. Inform. Visualization

View full text Add to dashboard Cite

Today, academic institution involves digital data to support the educational process. It has advantages, especially related to ease of access and process. However, security problems appear related to digital data. There were several information security incidents in the academic environment. In order to mitigate the problem, metrics identification is required to determine the risk of incidents. There are many risks model and metrics to estimate the risk, such as DREAD, OWASP, CVSS, etc. However, specific metrics are required to obtain appropriate risk values. Therefore, this study aims to define metrics for an academic institution. The proposed metrics are obtained from The Family Educational Rights and Privacy Act (FERPA) regulation. It consists of directory information, educational information, personally identifiable information, and risk of information leakage. In order to achieve the objective, this study involves survey and reliability analysis to result in output. The survey is conducted by involving 90 respondents with various levels of education and jobs. The Cronbach's alpha and Test-retest are methods to determine this study's reliability. According to reliability analysis, the Cronbach's alpha method results in coefficients for the metrics between 0.730 - 0.911, while the Test-retest method results in coefficients between 0.630 - 0.797. These coefficients have a reliable category, so the proposed metrics are adequate for determining risk of information security incidents in academic environments. The reliable metrics will be developed as variables of the risk assessment model for the academic environment in the future study.

show abstract

Section: Resultsmentioning

confidence: 99%

Section: Fig 1 the Metrics Of Cvssmentioning

confidence: 99%

The Reliability Analysis for Information Security Metrics in Academic Environment

Ibnugraha

Satria

Nagari

et al. 2023

JOIV : Int. J. Inform. Visualization

View full text Add to dashboard Cite

show abstract

“…In our previous study, validity analysis had been conducted using correlation and significance analysis process [13]. Correlation between metrics and risk profile had been computed using Spearman-Rank method and produced coefficients in Table 3.…”

Section: Resultsmentioning

confidence: 99%

“…Therefore, we involve reliability analysis as part of metrics development from our risk model. In our previous work, metrics development had passed through theoretical analysis and validity analysis [13]. Theoretical analysis aims to select metrics from business aspects based on theory literature.…”

Section: Introductionmentioning

confidence: 99%

Reliability Analysis of Risk Model Metrics Based on Business Approach in Information Security

Ibnugraha¹,

Nugroho²,

Santosa³

2020

ISI

Self Cite

View full text Add to dashboard Cite

Threat of information security has impact to business of organization. Therefore, the development of information security risk model should consider business perspective. In order to develop new risk model, defining metrics is important process. It can be conducted by theoretical analysis, validity analysis and reliability analysis. Theoretical analysis and validity analysis had been performed in previous work. Furthermore, reliability analysis is performed in this paper. Cronbach's Alpha is required as method to measure reliability coefficient from five proposed metrics namely reputation, financial impact, critical level, business type of organization, and size of organization. Reliability analysis from proposed metrics results coefficient between 0.70-0.91. Based on previous researches, metric is reliable if it has coefficient greater than 0.65. Therefore, proposed metrics have adequate reliability to be used as metrics of risk model.

show abstract

“…Sensitivitas aset untuk menggambarkan profil risiko kesehatan dilakukan melalui berbagai perspektif. Berdasarkan hasil penelitian yang dilakukan oleh Deshanta et.al., perspektif bisnis dengan metris dampak finansial, reputasi, level kritis, ukuran organisasi, dan tipe organisasi dapat digunakan untuk melakukan analisis untuk menghasilkan profil risiko pada sektor kesehatan [26].…”

Section: ) Profil Risikounclassified

Design of Information Security Risk Management Framework Based on a Risk Profiling Study in the Healthcare Sector

Dewi,

Suryanto

2022

JURNAL MULTIMEDIA NETWORKING INFORMATICS

View full text Add to dashboard Cite

Saat ini, sektor kesehatan merupakan salah satu sektor yang menjadi target utama serangan siber. Penggunaan teknologi informasi pada sektor kesehatan menyebabkan munculnya berbagai kerentanan dalam sektor kesehatan. Pengelolaan risiko keamanan informasi merupakan salah satu hal yang harus dilakukan oleh organisasi sektor kesehatan. Penelitian ini bertujuan untuk menghasilkan kerangka kerja manajemen risiko keamanan informasi pada sektor kesehatan berdasarkan kajian terhadap profil risiko yang ada pada sektor kesehatan. Penelitian dilakukan dengan metode kualitatif. Berdasarkan hasil risk profiling, sektor kesehatan mempunyai dua aset kritikal, yaitu electronic health record dan perangkat medis yang saling terhubung atau Internet of Medical Things. Aset tersebut mempunyai sensitivitas yang tinggi namun mempunyai berbagai kerentanan yang rawan dieksploitasi. Untuk mengatasi hal tersebut, diajukan kerangka kerja manajemen risiko keamanan informasi yang terdiri atas empat tahap, yaitu Risk Profiling, Pengukuran Level Risiko, Perlakuan Risiko, dan Pemantauan. Risk Profiling merupakan tahap yang penting dalam proses manajemen risiko. Pada tahap tersebut dilakukan analisis untuk menghasilkan gambaran profil risiko keamanan informasi berdasarkan aset kritikal yang dimiliki organisasi dan kondisi ruang siber dalam konteks keamanan informasi di sektor kesehatan. Kerangka yang diajukan bersifat siklis karena profil risiko pada sektor kesehatan sifatnya dinamis sehingga perlu dilakukan pemantauan terhadap perubahan profil risiko organisasi.

show abstract

Metrics analysis of risk profile: A perspective on business aspects

Cited by 6 publications

References 7 publications

The Reliability Analysis for Information Security Metrics in Academic Environment

The Reliability Analysis for Information Security Metrics in Academic Environment

Reliability Analysis of Risk Model Metrics Based on Business Approach in Information Security

Design of Information Security Risk Management Framework Based on a Risk Profiling Study in the Healthcare Sector

Contact Info

Product

Resources

About