文章基本信息

标题：Methodology for assessing the risk associated with information and knowledge loss management
本地全文：下载
作者：Hanna Yarovenko ; Yuriy Bilan ; Serhiy Lyeonov 等
期刊名称：Journal of Business Economics and Management
印刷版ISSN：1611-1699
出版年度：2021
卷号：22
期号：2
页码：369-387
DOI：10.3846/jbem.2021.13925
语种：English
出版社：Vilnius Gediminas Technical University
摘要：In practice, there is a massive time lag between data loss and its cause identification. The existing techniques perform it comprehensively, but they consume too much time, so there is a need for fast and reliable methods. The article’s purpose is to develop a rapid methodology to assess the risk of information and knowledge loss management. It provides the implementation of eight steps and combines a risk mapping method modified by assessments based on risk factors and incidents as elements from set theory and using formalization via binary estimates. The methodology includes five significant events caused by the company staff, technical problems, software, cybercriminals, viral attacks, and 66 factors influencing company incidents. As a result, a risk map of 9 groups was built for a Ukrainian enterprise. Only two groups with the minimum number of incidents and low losses are represented by all five incidents. The defined overall level of each risk group ranges from 0.14 to 0.26, which indicates a low probability of all happenings in the group. In general, the resulting map shows the existence of specific security problems of the company under investigation. The proposed assessment allows us to interpret the level of risk in the company quickly, identify weaknesses in the information security system, and predict future losses.