provide a model for identifying and ranking the managerial factors affecting information security in organization by using vikor method; case study: tehran university of medical sciences

nowadays, by the expansion of information technology in human life and dependence of business upon it, data protection, as one the most valuable and critical assets of the organization, has become the vital tool of modern industry and prerequisite for sustaining business process. in order to face the challenges and to take advantage of new opportunities brought forth by it advances we suggest organizations shift the focus from a technology-based information security to a managerial-based approach. also, as the organizations get familiar with the importance and priority of key managerial factors affecting information security, they will be able to increase the efficiency of organization considering limited resources and the importance of each criterion. in this study, it has been tried to identify managerial factors affecting information security in tehran university of medical sciences. also, it was intended to address more important factors in order to increase efficiency. for group decision-making, delphi method, and for modeling linguistic valuables and uncertainty in the theories, fuzzy theory was used in order to extract major managerial indices affecting information security in the organization. then, by using vikor technique as one of the multi-criterion decision-making methods, the indices obtained by fuzzy delphi method were prioritized.