Abstract

JIMENEZ-MARTIN, Antonio; VICENTE, Eloy  and  MATEOS, Alfonso. Safeguard selection for risk management in information systems: a fuzzy approach. RISTI [online]. 2015, n.15, pp.83-100. ISSN 1646-9895.  https://doi.org/10.1013/risti.15.83-100.

In this paper we focus on the safeguard selection within the risk analysis and management in information systems (IS) under a fuzzy perspective. Preventive safeguards can be implemented to reduce the risk associated with potential threats in IS, whereas palliative safeguards reduce the probability of failure transmission through the assets network. However, safeguards have associated costs and a selection process has then to be carried out. We describe optimization problems associated with different perspectives on the selection of safeguards and propose solution techniques based on dynamic programming and the use of metaheuristics.

Keywords : Risk analysis and management; information systems; safeguard selection; fuzzy logic; optimization.

        · abstract in Spanish     · text in Spanish     · Spanish ( pdf )