Priority indexing model for evaluating and analysing organisations' information security systems

Information technology (IT) has come to play an important and vital role in any organisation. As a consequence, security has become an essential aspect of IT and the negative impacts of security threats will affect not only systems or individuals but also organisations and society. In this paper, a priority indexing model (PIM) was proposed to evaluate organisation's information security system and to calculate a development priority index that can be used as an indicator for development needs. To examine the validity of the proposed model, the information security system in Ministry of Education (MOE) in the State of Kuwait was evaluated to determine the overall development priority indexes. The results showed that the proposed model can assist decision makers to consider different criteria and indicators before committing to a particular choice of security system development or to evaluate any existing security system. Finally, the general development priority index derived in this work can be used as a reference for information security planning and management process improvements.