IDEAS home Printed from https://ideas.repec.org/a/spr/infsem/v15y2017i1d10.1007_s10257-016-0306-y.html
   My bibliography  Save this article

Ranking information security controls by using fuzzy analytic hierarchy process

Author

Listed:
  • Hamid Khajouei

    (University of Sistan and Baluchestan)

  • Mehdi Kazemi

    (University of Sistan and Baluchestan)

  • Seyed Hamed Moosavirad

    (Shahid Bahonar University of Kerman)

Abstract

Information security can be achieved by implementing a set of appropriate controls. However, identifying and selecting the most effective information security controls in organizations have been major challenges for years. Although many studies have been done to address these challenges, there is still lack of research to rank these controls. In this study, a fuzzy Analytic Hierarchy Process was used to prioritize and select effective managerial domains and control objectives in information security controls. In this research, the process of implementing ISO 27001 Information Security in National Iranian Oil Products Distribution Company was selected. According to results, the access control, information systems acquisition, development and maintenance have the highest priorities among the information security controls in managerial domains. On the other hand, the business continuity management and asset management have the lowest priorities among the studied information security controls. Furthermore, it was found that among 39 control objectives, the user access management and third party service delivery management have the highest and lowest priorities, respectively.

Suggested Citation

  • Hamid Khajouei & Mehdi Kazemi & Seyed Hamed Moosavirad, 2017. "Ranking information security controls by using fuzzy analytic hierarchy process," Information Systems and e-Business Management, Springer, vol. 15(1), pages 1-19, February.
    • Handle: RePEc:spr:infsem:v:15:y:2017:i:1:d:10.1007_s10257-016-0306-y
    DOI: 10.1007/s10257-016-0306-y
    as

    Download full text from publisher

    File URL: http://link.springer.com/10.1007/s10257-016-0306-y
    File Function: Abstract
    Download Restriction: Access to the full text of the articles in this series is restricted.
    File URL: https://libkey.io/10.1007/s10257-016-0306-y?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Chang, Da-Yong, 1996. "Applications of the extent analysis method on fuzzy AHP," European Journal of Operational Research, Elsevier, vol. 95(3), pages 649-655, December.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Abhishek Behl & Pankaj Dutta & Stefan Lessmann & Yogesh K. Dwivedi & Samarjit Kar, 2019. "A conceptual framework for the adoption of big data analytics by e-commerce startups: a case-based approach," Information Systems and e-Business Management, Springer, vol. 17(2), pages 285-318, December.
    2. S. Subashanthini & M. Pounambal, 2020. "Three stage hybrid encryption of cloud data with penta-layer security for online business users," Information Systems and e-Business Management, Springer, vol. 18(3), pages 379-404, September.
    3. Mauricio Diéguez & Jaime Bustos & Carlos Cares, 0. "Mapping the variations for implementing information security controls to their operational research solutions," Information Systems and e-Business Management, Springer, vol. 0, pages 1-30.
    4. Mauricio Diéguez & Jaime Bustos & Carlos Cares, 2020. "Mapping the variations for implementing information security controls to their operational research solutions," Information Systems and e-Business Management, Springer, vol. 18(2), pages 157-186, June.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Benyou Jia & Slobodan P. Simonovic & Pingan Zhong & Zhongbo Yu, 2016. "A Multi-Objective Best Compromise Decision Model for Real-Time Flood Mitigation Operations of Multi-Reservoir System," Water Resources Management: An International Journal, Published for the European Water Resources Association (EWRA), Springer;European Water Resources Association (EWRA), vol. 30(10), pages 3363-3387, August.
    2. Pasura Aungkulanon & Walailak Atthirawong & Pongchanun Luangpaiboon & Wirachchaya Chanpuypetch, 2024. "Navigating Supply Chain Resilience: A Hybrid Approach to Agri-Food Supplier Selection," Mathematics, MDPI, vol. 12(10), pages 1-41, May.
    3. Juan Carlos Martín & Veronika Rudchenko & María-Victoria Sánchez-Rebull, 2020. "The Role of Nationality and Hotel Class on Guests’ Satisfaction. A Fuzzy-TOPSIS Approach Applied in Saint Petersburg," Administrative Sciences, MDPI, vol. 10(3), pages 1-24, September.
    4. Sajid Ali & Sang-Moon Lee & Choon-Man Jang, 2017. "Determination of the Most Optimal On-Shore Wind Farm Site Location Using a GIS-MCDM Methodology: Evaluating the Case of South Korea," Energies, MDPI, vol. 10(12), pages 1-22, December.
    5. Choudhary, Devendra & Shankar, Ravi, 2012. "An STEEP-fuzzy AHP-TOPSIS framework for evaluation and selection of thermal power plant location: A case study from India," Energy, Elsevier, vol. 42(1), pages 510-521.
    6. Lupo, Toni, 2015. "Fuzzy ServPerf model combined with ELECTRE III to comparatively evaluate service quality of international airports in Sicily," Journal of Air Transport Management, Elsevier, vol. 42(C), pages 249-259.
    7. He-Yau Kang & Amy H. I. Lee & Tzu-Ting Huang, 2016. "Project Management for a Wind Turbine Construction by Applying Fuzzy Multiple Objective Linear Programming Models," Energies, MDPI, vol. 9(12), pages 1-15, December.
    8. Noori, Amir & Bonakdari, Hossein & Salimi, Amir Hossein & Gharabaghi, Bahram, 2021. "A group Multi-Criteria Decision-Making method for water supply choice optimization," Socio-Economic Planning Sciences, Elsevier, vol. 77(C).
    9. Bojan Srdjevic & Yvonilde Medeiros, 2008. "Fuzzy AHP Assessment of Water Management Plans," Water Resources Management: An International Journal, Published for the European Water Resources Association (EWRA), Springer;European Water Resources Association (EWRA), vol. 22(7), pages 877-894, July.
    10. Wang, Ying-Ming & Luo, Ying & Hua, Zhongsheng, 2008. "On the extent analysis method for fuzzy AHP and its applications," European Journal of Operational Research, Elsevier, vol. 186(2), pages 735-747, April.
    11. Nitidetch Koohathongsumrit & Pongchanun Luangpaiboon, 2022. "An integrated FAHP–ZODP approach for strategic marketing information system project selection," Managerial and Decision Economics, John Wiley & Sons, Ltd., vol. 43(6), pages 1792-1809, September.
    12. Deng, Yanfei & Xu, Jiuping & Liu, Ying & Mancl, Karen, 2014. "Biogas as a sustainable energy source in China: Regional development strategy application and decision making," Renewable and Sustainable Energy Reviews, Elsevier, vol. 35(C), pages 294-303.
    13. Xin, Li & Xi, Chen & Sagir, Mujgan & Wenbo, Zhang, 2023. "How can infectious medical waste be forecasted and transported during the COVID-19 pandemic? A hybrid two-stage method," Technological Forecasting and Social Change, Elsevier, vol. 187(C).
    14. Waseem Alam & Haiyan Wang & Amjad Pervez & Muhammad Safdar & Arshad Jamal & Meshal Almoshaogeh & Hassan M. Al-Ahmadi, 2024. "Analysis and Prediction of Risky Driving Behaviors Using Fuzzy Analytical Hierarchy Process and Machine Learning Techniques," Sustainability, MDPI, vol. 16(11), pages 1-27, May.
    15. Rovick Tarife & Yosuke Nakanishi & Yicheng Zhou & Noel Estoperez & Anacita Tahud, 2023. "Integrated GIS and Fuzzy-AHP Framework for Suitability Analysis of Hybrid Renewable Energy Systems: A Case in Southern Philippines," Sustainability, MDPI, vol. 15(3), pages 1-25, January.
    16. Adiprasetyo, Teguh & Suhartoyo, Hery & Firdaus, Arief, 2017. "Developing Strategy for Advancing Organic Agriculture as Sustainable Agricultural Practice," INA-Rxiv wb37h, Center for Open Science.
    17. Aleksandar Aleksić & Danijela Tadić, 2023. "Industrial and Management Applications of Type-2 Multi-Attribute Decision-Making Techniques Extended with Type-2 Fuzzy Sets from 2013 to 2022," Mathematics, MDPI, vol. 11(10), pages 1-24, May.
    18. Puppala, Harish & Peddinti, Pranav R.T. & Tamvada, Jagannadha Pawan & Ahuja, Jaya & Kim, Byungmin, 2023. "Barriers to the adoption of new technologies in rural areas: The case of unmanned aerial vehicles for precision agriculture in India," Technology in Society, Elsevier, vol. 74(C).
    19. Hsin-Chieh Wu & Toly Chen & Chin-Hau Huang, 2020. "A Piecewise Linear FGM Approach for Efficient and Accurate FAHP Analysis: Smart Backpack Design as an Example," Mathematics, MDPI, vol. 8(8), pages 1-18, August.
    20. Kamoonpuri, Sana Zehra & Sengar, Anita, 2023. "Hi, May AI help you? An analysis of the barriers impeding the implementation and use of artificial intelligence-enabled virtual assistants in retail," Journal of Retailing and Consumer Services, Elsevier, vol. 72(C).

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:infsem:v:15:y:2017:i:1:d:10.1007_s10257-016-0306-y. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.