ICT Outsourcing Information Security Risk Factors: An Exploratory Analysis of Threat Risks Factor for Critical Project Characteristics

This paper developed a method to assess information security risks in e-healthcare. Specifically, it first developed a static E-Healthcare Information Security Risk (EHISR) model to present thirty-three security risk factors by identifying information security threats and their sources in e-healthcare. Second, a dynamic E-Healthcare Information Flow (EHIF) model was developed to logically link these information risk factors in the EHISR model. Pattern analysis showed that information security risks could be classified into two levels, and versatility analysis showed that the overall security risks for eight information flows were close with a range from 55% to 86%. Third, one quantifiable approach based on a relative-weighted assessment model was developed to demonstrate how to assess the information security risks in e-healthcare. This quantitative security risk measurement establishes a reference point for assessing e-healthcare security risks and assists managers in selecting a reliable information flow infrastructure with a lower security risk level.

Download Full-text

Information Security Risk Assessment Model Based on Computing with Words

MENDEL ◽

10.13164/mendel.2017.1.119 ◽

2017 ◽

Vol 23 (1) ◽

pp. 119-124

Author(s):

Oleg Tymchuk ◽

Maryna Iepik ◽

Artyom Sivyakov

Keyword(s):

Risk Factors ◽

Risk Assessment ◽

Information Security ◽

Assessment Model ◽

Computing With Words ◽

Risk Assessment Model ◽

It Services ◽

Security Risk ◽

Information Security Risk ◽

Security Risk Assessment

The basis for company IT infrastructure security is information security risks assessment of IT services. The increased complexity, connectivity and rapid changes occurring in IT services make it impossible to apply traditional models of quantitative/qualitative risk assessment. Existing quantitative assessment models are time-consuming, at the same time, qualitative assessment models do not take into account the subjective expert assessments and the uncertainty of risk factors. This paper presents the new information security risk assessment model for IT services based on computing with words. The model methodology is based on OWASP risk rating methodology for web applications. To evaluate risk factors, it is proposed to use dictionary consisting of 16/32 granular terms (words). Problems of uncertainty in perceptual assessments of risk factors are taken into account using methods of the theory of discrete interval type-2 fuzzy sets and systems.

Download Full-text

Development of an E-Healthcare Information Security Risk Assessment Method

Healthcare Administration ◽

10.4018/978-1-4666-6339-8.ch014 ◽

2015 ◽

pp. 248-269

Author(s):

June Wei ◽

Binshan Lin ◽

Meiga Loho-Noya

Keyword(s):

Risk Factors ◽

Information Security ◽

Information Flow ◽

Assessment Method ◽

Risk Level ◽

Security Risk ◽

Security Risks ◽

Healthcare Information ◽

Information Security Risk ◽

Security Risk Assessment

This paper developed a method to assess information security risks in e-healthcare. Specifically, it first developed a static E-Healthcare Information Security Risk (EHISR) model to present thirty-three security risk factors by identifying information security threats and their sources in e-healthcare. Second, a dynamic E-Healthcare Information Flow (EHIF) model was developed to logically link these information risk factors in the EHISR model. Pattern analysis showed that information security risks could be classified into two levels, and versatility analysis showed that the overall security risks for eight information flows were close with a range from 55% to 86%. Third, one quantifiable approach based on a relative-weighted assessment model was developed to demonstrate how to assess the information security risks in e-healthcare. This quantitative security risk measurement establishes a reference point for assessing e-healthcare security risks and assists managers in selecting a reliable information flow infrastructure with a lower security risk level.

Download Full-text