Methodology for evaluating security controls based on key performance indicators and stakeholder mission
Document Type
Conference Proceeding
Publication Date
4-3-2009
Abstract
Information security continues to evolve in response to disruptive changes with a persistent focus on information-centric controls and a healthy debate about balancing endpoint and network protection, with a goal of improved enterprise/business risk management. Economic uncertainty, intensively collaborative styles of work, virtualization, increased outsourcing and ongoing compliance pressures require careful consideration and adaptation. This paper proposes a Cyberspace Security Econometrics System (CSES) that provides a measure (i.e., a quantitative indication) of reliability, performance and/or safety of a system that accounts for the criticality of each requirement as a function of one or more stakeholders' interests in that requirement. For a given stakeholder, CSES accounts for the variance that may exist among the stakes one attaches to meeting each requirement. This paper introduces the basis, objectives and capabilities for the CSES including inputs/outputs as well as the structural and mathematical underpinnings. © 2009 IEEE.
Identifier
58449091750 (Scopus)
ISBN
[9780769534503]
Publication Title
Proceedings of the 42nd Annual Hawaii International Conference on System Sciences Hicss
External Full Text Location
https://doi.org/10.1109/HICSS.2009.308
Recommended Citation
Sheldon, Frederick T.; Abercrombie, Robert K.; and Mili, Ali, "Methodology for evaluating security controls based on key performance indicators and stakeholder mission" (2009). Faculty Publications. 12106.
https://digitalcommons.njit.edu/fac_pubs/12106
