engleski

Towards a Hybrid Model for the Evaluation of Critical IT Systems

Given that today'sverycomplex and interconnected business processes meaningly rely on Internet communication with other business entities, organizations are increasingly exposed to numerous security threats and imminent risks.Due to the lack of all relevant information andthetime and resource constraints, it is not possible to collect and process all necessary information about an information system so thatit can be adequately evaluated within an acceptable timeframe, which puts the organization into a state of increased security risk. By studying the relevant literature and existing models and techniques used in practice, it was determined that there is nosolution to the stated problem of multicriteria decision-making in conditions of uncertainty in the domain of information security. Thus, the proposal is to design a model for more efficient (in terms of costsand time) decision-making on the security state of a critical information system by selecting the appropriate IT solution.In this paper we will present the iterative steps of DSRM (Design Science Research Methodology) for development of a new hybrid multicriteria model for the purpose of evaluation, ranking and selection of critical IT systems.

Information security ; risk assessment ; multicriteria decision-making ; hybrid model

nije evidentirano