Choosing a Prioritization Method-Case of IS Security Improvement

A number of multi-criteria decision-making methods can be used for prioritizing in different contexts. Our industry experience showed us that -at least in France and Russiapeople are not aware of the existing prioritization methods and not able to select one when they are provided with a simple state of the art reference list. We therefore believe that a structured approach is necessary for guiding the systematic selection of a prioritization method. Our proposal consists in a process that helps the decision makers considering the different aspects of the problem at hand, and of the expected characteristics of the required method. The approach is illustrated with the example of a prioritization to be made for improving business and IS security in the banking sector. The selected method is chosen among: MAUT, AHP, Outranking, weighting methods, expert classification and fuzzy methods.