Towards a systematic approach for improving information security risk management methods

Papadaki, K; Polemi, N

dc.contributor.author	Papadaki, K	en
dc.contributor.author	Polemi, N	en
dc.date.accessioned	2014-03-01T02:51:17Z
dc.date.available	2014-03-01T02:51:17Z
dc.date.issued	2007	en
dc.identifier.uri	https://dspace.lib.ntua.gr/xmlui/handle/123456789/35445
dc.subject.other	Cryptography	en
dc.subject.other	Risk management	en
dc.subject.other	Security systems	en
dc.subject.other	Societies and institutions	en
dc.subject.other	Design science research	en
dc.subject.other	Information security risk management methods	en
dc.subject.other	Systematic process	en
dc.subject.other	Security of data	en
dc.title	Towards a systematic approach for improving information security risk management methods	en
heal.type	conferenceItem	en
heal.identifier.primary	10.1109/PIMRC.2007.4394150	en
heal.identifier.secondary	http://dx.doi.org/10.1109/PIMRC.2007.4394150	en
heal.identifier.secondary	4394150	en
heal.publicationDate	2007	en
heal.abstract	The management of information security risk is a major concern of organizations worldwide. Although, the number of existing information security risk management methods is enormous, in practice a lot of time, effort and knowledge are invested by organizations in the process of creating new information security risk management methods. Surprisingly, the study of literature reveals a lack of sufficient research concerning the process of developing new, or improving existing, information security risk management methods. Therefore, in this paper we operate within the paradigm of design science research in order to propose a systematic process for the development of new, or improvement of existing, information security risk management methods. Furthermore, this effort emphasizes the effective utilization of pre-existing and new knowledge on information security risk management created throughout the process. © 2007 IEEE.	en
heal.journalName	IEEE International Symposium on Personal, Indoor and Mobile Radio Communications, PIMRC	en
dc.identifier.doi	10.1109/PIMRC.2007.4394150	en