Ranking information security controls by using fuzzy analytic hierarchy process

Hamid Khajouei (), Mehdi Kazemi () and Seyed Hamed Moosavirad ()
Additional contact information
Hamid Khajouei: University of Sistan and Baluchestan
Mehdi Kazemi: University of Sistan and Baluchestan
Seyed Hamed Moosavirad: Shahid Bahonar University of Kerman

Information Systems and e-Business Management, 2017, vol. 15, issue 1, No 1, 19 pages

Abstract: Abstract Information security can be achieved by implementing a set of appropriate controls. However, identifying and selecting the most effective information security controls in organizations have been major challenges for years. Although many studies have been done to address these challenges, there is still lack of research to rank these controls. In this study, a fuzzy Analytic Hierarchy Process was used to prioritize and select effective managerial domains and control objectives in information security controls. In this research, the process of implementing ISO 27001 Information Security in National Iranian Oil Products Distribution Company was selected. According to results, the access control, information systems acquisition, development and maintenance have the highest priorities among the information security controls in managerial domains. On the other hand, the business continuity management and asset management have the lowest priorities among the studied information security controls. Furthermore, it was found that among 39 control objectives, the user access management and third party service delivery management have the highest and lowest priorities, respectively.

Keywords: Information security management; ISO 27001; Fuzzy analytic hierarchy process; Information security controls (search for similar items in EconPapers)
Date: 2017
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (4)

Downloads: (external link)
http://link.springer.com/10.1007/s10257-016-0306-y Abstract (text/html)
Access to the full text of the articles in this series is restricted.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:infsem:v:15:y:2017:i:1:d:10.1007_s10257-016-0306-y

Ordering information: This journal article can be ordered from
http://www.springer. ... ystems/journal/10257

DOI: 10.1007/s10257-016-0306-y

Access Statistics for this article

Information Systems and e-Business Management is currently edited by Jörg Becker and Michael J. Shaw

More articles in Information Systems and e-Business Management from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().