loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Agnes Åkerlund and Christine Große

Affiliation: Department of Information Systems and Technology, Mid Sweden University, Holmgatan 10, Sundsvall, Sweden

Keyword(s): Data Envelopment Analysis, Information Security, Business Process, BPMN, Human Factor.

Abstract: This article explores the question of how to measure information security. Organisational information security is difficult to evaluate in this complex area because it includes numerous factors. The human factor has been acknowledged as one of the most challenging factors to consider in the field of information security. This study models the application of data envelopment analysis to business processes in order to facilitate the evaluation of information security that includes human factors. In addition to the model, this study demonstrates that data envelopment analysis provides an efficiency measure to assess the information security level of a business process. The novel approach that is proposed in this paper is exemplified with the aid of three fictive processes. The Business Process Model and Notation has been used to map the processes because it facilitates the visualisation of human interactions in processes and the form of the processed information. The combination of data envelopment analysis with process modelling and analyses of process deficiencies and threats to information security enables the evaluation of information security to include human factors in the analyses. Moreover, it provides a measure to benchmark information security in organisational processes. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.142.199.138

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Åkerlund, A. and Große, C. (2020). Integration of Data Envelopment Analysis in Business Process Models: A Novel Approach to Measure Information Security. In Proceedings of the 6th International Conference on Information Systems Security and Privacy - ICISSP; ISBN 978-989-758-399-5; ISSN 2184-4356, SciTePress, pages 281-288. DOI: 10.5220/0008875802810288

@conference{icissp20,
author={Agnes Åkerlund. and Christine Große.},
title={Integration of Data Envelopment Analysis in Business Process Models: A Novel Approach to Measure Information Security},
booktitle={Proceedings of the 6th International Conference on Information Systems Security and Privacy - ICISSP},
year={2020},
pages={281-288},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0008875802810288},
isbn={978-989-758-399-5},
issn={2184-4356},
}

TY - CONF

JO - Proceedings of the 6th International Conference on Information Systems Security and Privacy - ICISSP
TI - Integration of Data Envelopment Analysis in Business Process Models: A Novel Approach to Measure Information Security
SN - 978-989-758-399-5
IS - 2184-4356
AU - Åkerlund, A.
AU - Große, C.
PY - 2020
SP - 281
EP - 288
DO - 10.5220/0008875802810288
PB - SciTePress