Comprehensive Evaluation Based on Gray Relation Analysis for Information Security Management Measurement

摘要：

The purpose of this paper is to study the comprehensive evaluation method for Information Security Management Measurement (ISMM). An organizations information security management performance would be assessed from three dimensions: implementation, effectiveness and input. Each dimensional evaluation value and final result can be calculated by gray relation analysis. A cube model for ISMM is then presented and it is capable of providing valuable results for managers since it is based on managing, technical and economic considerations. Under the circumstance that ISMM is mainly concerned about indicators of microcosmic level and frameworks of macro level, the advance of comprehensive evaluation based on gray relation analysis benefits building a more integrated ISMM system.

关键词： Information security management measurement gray relation analysis comprehensive evaluation

作者: Xi-quan Guo Wei-qi Luo Guo-xiang Yao

作者单位: School of Mangagement Jinan University Guangzhou, PRC School of Information Engineering Guangzhou Pa School of Mangagement Jinan University Guangzhou, PRC School of Information Jinan University Guangzhou, PRC

会议类型: 国际会议

会议名称: 2010 International Conference of Informationa Science and Management Engineering(2010年信息科学与管理工程国际学术会议 ISME 2010)

会议地点: 西安

会议语种:英文

页码: 143-146

在线出版日期: 2010-08-07（万方平台首次上网日期，不代表论文的发表时间）