Modeling the Impact of Controls on Information System Risks
نویسندگان
چکیده
Information system risk management helps to reduce or eliminate risk by implementing appropriate controls. In this paper, we propose a quantification model of controls impact on information system risks by automatizing the residual criticality estimation step of FMECA which is based on a inductive reasoning. For this, we defined three equations based on type and maturity of controls. For testing, the values obtained with the model were compared to estimated values given by interlocutors during different working sessions and the result is satisfactory. This model allows an optimal assessment of controls maturity and facilitates risk analysis of information system. Keywords—Information System, Risk, Control, FMECA.
منابع مشابه
Improving Data-based Wind Turbine Using Measured Data Foggy Method
The purpose of this paper is to improve the modeling of the data-driven wind turbine system that receives data from noise signals. Most of the data on industrial systems is noisely and data noise is inevitable and natural. The method and idea proposed in this paper, Data Fogging, significantly reduce the impact of noise on data-driven wind turbine system modeling, which is the basis of this met...
متن کاملDeveloping a Risk Management Model for Banking Software Development Projects Based on Fuzzy Inference System
Risk management is one of the most influential parts of project management that has a major impact on the success or failure of projects. Due to the increasing use of information technology (IT) systems in all fields and the high failure rate of IT projects in software development and production, it is essential to effectively manage these projects is essential. Therefore, this study is aimed t...
متن کاملStudy of the Role of key risks in the trip gas sweetening unit by using Structural Equation Modeling: A case study in the Gas Refinery
Introduction: Unit risk management is a critical component of gas refining management, as risks that are not well-managed may lead to trip production failures. The present study aimed to provide a structural model for investigating the role and effect of different variables on stopping the gas production process in the gas refinery. Material and Methods: This study was a retrospective cross-se...
متن کاملA risk model for cloud processes
Traditionally, risk assessment consists of evaluating the probability of "feared events", corresponding to known threats and attacks, as well as these events' severity, corresponding to their impact on one or more stakeholders. Assessing risks of cloud-based processes is particularly difficult due to lack of historical data on attacks, which has prevented frequency-based identification...
متن کاملIntelligent multi-agent modeling of the interbank network and evaluation of the impact of regulatory policies
agent-based modeling is an emerging computational technique that makes it possible to simulate complex economic systems, including the banking network, with a bottom-up approach. In this paper, the country's banking network is simulated with an intelligent multi-agent modeling model and indicates that these agents behave based on the adaptive learning. This modeling has been done with the aim o...
متن کامل