Security Capability Assessment on Network Monitoring Information System Using COBIT 5 for Information Security

Pratiwi, Aris; Indah, Dwi Rosa; Jauhari, Jaidan; Firdaus, Mgs. Afriyan

doi:10.2991/aisr.k.200424.024

Cited by 3 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Seven articles focus on information security risk analysis in government, three on educational institutions, one on civil engineering companies, one on e-commerce in particular, two on cloud computing, and the others on information systems in general. [11], [13], [15], [18], [21], [24], [25], [26], [27], [30], [35] 11 Government [14], [19], [23], [28], [29], [32], [34] 7 Education Institution [16], [20], […”

Section: Bmentioning

confidence: 99%

“…There is one study that compares quantitative and qualitative methods [11]. [11], [15], [18], [20], [21], [25], [28], [31], [32] 9 Quantitative [11], [13], [16], [17], [22], [26], [27], [35] 8 Hybrid [12], [14], [19], [23], [24], [29], [30], [33], [34] 9…”

Section: Dmentioning

confidence: 99%

“…Some studies applied international and professional organisational frameworks, which were subsequently adapted to governments. The frameworks used include The National Institute of Standards and Technology (NIST), COBIT 5, ISO/IEC 27002, and ISO/IEC 27005 framework [19], [23], [28], [29]. While the implementation in educational institutions includes PRISMA and OCTAVE Allegro [20], [33], and implementation in companies that utilize FMEA [18].…”

Section: Dmentioning

confidence: 99%

See 2 more Smart Citations

Information Security Risk Assessment (ISRA): A Systematic Literature Review

Devi

Sensuse

Kautsarina

et al. 2022

J. Inf. Syst. Eng. Bus. Intell.

View full text Add to dashboard Cite

Background: Information security is essential for organisations, hence the risk assessment. Information security risk assessment (ISRA) identifies, assesses, and prioritizes risks according to organisational goals. Previous studies have analysed and discussed information security risk assessment. Therefore, it is necessary to understand the models more systematically. Objective: This study aims to determine types of ISRA and fill a gap in literature review research by categorizing existing frameworks, models, and methods. Methods: The systematic literature review (SLR) approach developed by Kitchenham is applied in this research. A total of 25 studies were selected, classified, and analysed according to defined criteria. Results: Most selected studies focus on implementing and developing new models for risk assessment. In addition, most are related to information systems in general. Conclusion: The findings show that there is no single best framework or model because the best framework needs to be tailored according to organisational goals. Previous researchers have developed several new ISRA models, but empirical evaluation research is needed. Future research needs to develop more robust models for risk assessments for cloud computing systems. Keywords: Information Security Risk Assessment, ISRA, Security Risk

show abstract