IDEAS home Printed from https://ideas.repec.org/a/spr/infsem/v15y2017i1d10.1007_s10257-016-0306-y.html
   My bibliography  Save this article

Ranking information security controls by using fuzzy analytic hierarchy process

Author

Listed:
  • Hamid Khajouei

    (University of Sistan and Baluchestan)

  • Mehdi Kazemi

    (University of Sistan and Baluchestan)

  • Seyed Hamed Moosavirad

    (Shahid Bahonar University of Kerman)

Abstract

Information security can be achieved by implementing a set of appropriate controls. However, identifying and selecting the most effective information security controls in organizations have been major challenges for years. Although many studies have been done to address these challenges, there is still lack of research to rank these controls. In this study, a fuzzy Analytic Hierarchy Process was used to prioritize and select effective managerial domains and control objectives in information security controls. In this research, the process of implementing ISO 27001 Information Security in National Iranian Oil Products Distribution Company was selected. According to results, the access control, information systems acquisition, development and maintenance have the highest priorities among the information security controls in managerial domains. On the other hand, the business continuity management and asset management have the lowest priorities among the studied information security controls. Furthermore, it was found that among 39 control objectives, the user access management and third party service delivery management have the highest and lowest priorities, respectively.

Suggested Citation

  • Hamid Khajouei & Mehdi Kazemi & Seyed Hamed Moosavirad, 2017. "Ranking information security controls by using fuzzy analytic hierarchy process," Information Systems and e-Business Management, Springer, vol. 15(1), pages 1-19, February.
    • Handle: RePEc:spr:infsem:v:15:y:2017:i:1:d:10.1007_s10257-016-0306-y
    DOI: 10.1007/s10257-016-0306-y
    as

    Download full text from publisher

    File URL: http://link.springer.com/10.1007/s10257-016-0306-y
    File Function: Abstract
    Download Restriction: Access to the full text of the articles in this series is restricted.
    File URL: https://libkey.io/10.1007/s10257-016-0306-y?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Chang, Da-Yong, 1996. "Applications of the extent analysis method on fuzzy AHP," European Journal of Operational Research, Elsevier, vol. 95(3), pages 649-655, December.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Abhishek Behl & Pankaj Dutta & Stefan Lessmann & Yogesh K. Dwivedi & Samarjit Kar, 2019. "A conceptual framework for the adoption of big data analytics by e-commerce startups: a case-based approach," Information Systems and e-Business Management, Springer, vol. 17(2), pages 285-318, December.
    2. S. Subashanthini & M. Pounambal, 2020. "Three stage hybrid encryption of cloud data with penta-layer security for online business users," Information Systems and e-Business Management, Springer, vol. 18(3), pages 379-404, September.
    3. Mauricio Diéguez & Jaime Bustos & Carlos Cares, 0. "Mapping the variations for implementing information security controls to their operational research solutions," Information Systems and e-Business Management, Springer, vol. 0, pages 1-30.
    4. Mauricio Diéguez & Jaime Bustos & Carlos Cares, 2020. "Mapping the variations for implementing information security controls to their operational research solutions," Information Systems and e-Business Management, Springer, vol. 18(2), pages 157-186, June.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Benyou Jia & Slobodan P. Simonovic & Pingan Zhong & Zhongbo Yu, 2016. "A Multi-Objective Best Compromise Decision Model for Real-Time Flood Mitigation Operations of Multi-Reservoir System," Water Resources Management: An International Journal, Published for the European Water Resources Association (EWRA), Springer;European Water Resources Association (EWRA), vol. 30(10), pages 3363-3387, August.
    2. Juan Carlos Martín & Veronika Rudchenko & María-Victoria Sánchez-Rebull, 2020. "The Role of Nationality and Hotel Class on Guests’ Satisfaction. A Fuzzy-TOPSIS Approach Applied in Saint Petersburg," Administrative Sciences, MDPI, vol. 10(3), pages 1-24, September.
    3. Jelena Lukić & Mirjana Misita & Dragan D. Milanović & Ankica Borota-Tišma & Aleksandra Janković, 2022. "Determining the Risk Level in Client Analysis by Applying Fuzzy Logic in Insurance Sector," Mathematics, MDPI, vol. 10(18), pages 1-17, September.
    4. Sharma, Mahak & Antony, Rose & Sehrawat, Rajat & Cruz, Angel Contreras & Daim, Tugrul U., 2022. "Exploring post-adoption behaviors of e-service users: Evidence from the hospitality sector /online travel services," Technology in Society, Elsevier, vol. 68(C).
    5. Sajid Ali & Sang-Moon Lee & Choon-Man Jang, 2017. "Determination of the Most Optimal On-Shore Wind Farm Site Location Using a GIS-MCDM Methodology: Evaluating the Case of South Korea," Energies, MDPI, vol. 10(12), pages 1-22, December.
    6. Chia-Nan Wang & Ngoc-Ai-Thy Nguyen & Thanh-Tuan Dang & Chen-Ming Lu, 2021. "A Compromised Decision-Making Approach to Third-Party Logistics Selection in Sustainable Supply Chain Using Fuzzy AHP and Fuzzy VIKOR Methods," Mathematics, MDPI, vol. 9(8), pages 1-27, April.
    7. Choudhary, Devendra & Shankar, Ravi, 2012. "An STEEP-fuzzy AHP-TOPSIS framework for evaluation and selection of thermal power plant location: A case study from India," Energy, Elsevier, vol. 42(1), pages 510-521.
    8. Lupo, Toni, 2015. "Fuzzy ServPerf model combined with ELECTRE III to comparatively evaluate service quality of international airports in Sicily," Journal of Air Transport Management, Elsevier, vol. 42(C), pages 249-259.
    9. Lixin Shen & Kannan Govindan & Madan Shankar, 2015. "Evaluation of Barriers of Corporate Social Responsibility Using an Analytical Hierarchy Process under a Fuzzy Environment—A Textile Case," Sustainability, MDPI, vol. 7(3), pages 1-22, March.
    10. He-Yau Kang & Amy H. I. Lee & Tzu-Ting Huang, 2016. "Project Management for a Wind Turbine Construction by Applying Fuzzy Multiple Objective Linear Programming Models," Energies, MDPI, vol. 9(12), pages 1-15, December.
    11. Noori, Amir & Bonakdari, Hossein & Salimi, Amir Hossein & Gharabaghi, Bahram, 2021. "A group Multi-Criteria Decision-Making method for water supply choice optimization," Socio-Economic Planning Sciences, Elsevier, vol. 77(C).
    12. Wang, Xiaojun & Chan, Hing Kai & Li, Dong, 2015. "A case study of an integrated fuzzy methodology for green product development," European Journal of Operational Research, Elsevier, vol. 241(1), pages 212-223.
    13. Animesh Biswas & Samir Kumar, 2019. "Generalization of extent analysis method for solving multicriteria decision making problems involving intuitionistic fuzzy numbers," OPSEARCH, Springer;Operational Research Society of India, vol. 56(4), pages 1142-1166, December.
    14. Bojan Srdjevic & Yvonilde Medeiros, 2008. "Fuzzy AHP Assessment of Water Management Plans," Water Resources Management: An International Journal, Published for the European Water Resources Association (EWRA), Springer;European Water Resources Association (EWRA), vol. 22(7), pages 877-894, July.
    15. AbdulHafeez Muhammad & Ansar Siddique & Quadri Noorulhasan Naveed & Uzma Khaliq & Ali M. Aseere & Mohd Abul Hasan & Mohamed Rafik N. Qureshi & Basit Shahzad, 2021. "Evaluating Usability of Academic Websites through a Fuzzy Analytical Hierarchical Process," Sustainability, MDPI, vol. 13(4), pages 1-22, February.
    16. Wang, Ying-Ming & Luo, Ying & Hua, Zhongsheng, 2008. "On the extent analysis method for fuzzy AHP and its applications," European Journal of Operational Research, Elsevier, vol. 186(2), pages 735-747, April.
    17. Nitidetch Koohathongsumrit & Pongchanun Luangpaiboon, 2022. "An integrated FAHP–ZODP approach for strategic marketing information system project selection," Managerial and Decision Economics, John Wiley & Sons, Ltd., vol. 43(6), pages 1792-1809, September.
    18. Deng, Yanfei & Xu, Jiuping & Liu, Ying & Mancl, Karen, 2014. "Biogas as a sustainable energy source in China: Regional development strategy application and decision making," Renewable and Sustainable Energy Reviews, Elsevier, vol. 35(C), pages 294-303.
    19. Zahra Pouri & Morteza Heidarimozaffar, 2022. "Spatial Analysis and Failure Management in Water Distribution Networks Using Fuzzy Inference System," Water Resources Management: An International Journal, Published for the European Water Resources Association (EWRA), Springer;European Water Resources Association (EWRA), vol. 36(6), pages 1783-1797, April.
    20. Ricardo Echeverri Mart nez & Eduardo Caicedo Bravo & Wilfredo Alfonso Morales & Juan David Garcia-Racines, 2020. "A Bi-level Multi-objective Optimization Model for the Planning, Design and Operation of Smart Grid Projects. Case Study: An Islanded Microgrid," International Journal of Energy Economics and Policy, Econjournals, vol. 10(4), pages 325-341.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:infsem:v:15:y:2017:i:1:d:10.1007_s10257-016-0306-y. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.