scholarly journals Integrated Circuit Security Risk Management Framework in Government Agencies

Author(s):  
Raddam Sami Mehsen ◽  
Teeb Hussein Hadi ◽  
Shaymaa Taha Ahmed

The security risk management framework is an essential part of strategic management for government agencies. It allows a government to systematically identify and address the risks associated with its activities to achieve sustainability for different activities of security risk management. The goal of security risk management is to add sustainable value to government activities and reduce the chance of security breaches. Applying security risk management techniques used to government projects can increase the chances of success, help achieve objectives, and assist in finding preventive solutions for future projects. The application of security risk management is profitable for government agencies because it sets specific risk management objectives that are based on the broader overall strategy. It contributes to the achievement of strategic objectives with mechanisms like Spearman's rank correlation coefficient and simple linear regression. These techniques can improve decision-making, planning and implementation of government activities, as well as reduce the negative consequences of present threats. It is recommended to apply the integrated security risk management framework proposed in this paper to increase the effectiveness of security risk management in government agencies. Also using quantitative and intelligent techniques in the analysis and estimation of security risks can help managers to make decisions regarding security issues in government agencies.

2021 ◽  
Vol 13 (21) ◽  
pp. 11854
Author(s):  
Jozef Klucka ◽  
Rudolf Gruenbichler ◽  
Jozef Ristvej

The routine approach used in risk management is based on the scheme that within the prevention period an organisation or a state prepares for the expected risks and once the risks occur, resources and internal procedures are implemented to mitigate their negative consequences. The objective of the paper is to analyse risk management and its constraints, its application in COVID-19 period and based on it provide mitigating strategies for specific problems/risks related to COVID-19. The research methods related to the topics are: (a) study of books, newspapers and other internet resources and (b) interviews with COVID-19 managers at district and regional level in the north of Slovakia. The proposals for mitigation strategies are based on the basic assumption relevant for COVID-19 that there are risks with unknown probability and unknown consequences. Therefore, the mitigation strategies are adapted to the current situation, which includes lack of data and know-how, lack of experience, political and economic unrest and social problems. The impact of constraints is based on an ad-hoc or unplanned and clearly structured approach. Problems and risks are identified and mitigation strategies are proposed. The proposed measures (quantitative/qualitative) should be evaluated and via benchmarking the development and efficiency of applied measures monitored and assessed. The output of identified risk-known and –unknown creates a framework for implementation.


Author(s):  
Joshua Lubell

Cybersecurity professionals know the Risk Management Framework (RMF) as a rigorous yet flexible process for managing security risk. But the RMF lacks a document focus, even though much of the process requires authoring, reviewing, revising, and accessing plans and reports. It is possible to build such a focus by looking more closely at these documents, starting with the System Security Plan and the roles of key participants responsible for it. Such a document- and role-centric view of the RMF process can lead the way toward more efficient and less error-prone security assurance.


2020 ◽  
Vol 17 (1) ◽  
pp. 68-77
Author(s):  
V. E. Zaikovsky ◽  
A. V. Karev

Project success depends on the ability to respond to risks and make correct decisions in a timely manner. The project approach provides a better framework for implementing a new management system into the company’s business processes. The risk management framework developed by the company comprises a risk management infrastructure, a set of standards, human resources, and a risk management information system. To improve staff compliance, it is necessary to provide training and to communicate the goals of the project effectively. It is also important to develop a motivation system because well trained and motivated staff are able to work more efficiently.


Sign in / Sign up

Export Citation Format

Share Document