Maturity Model for the Risk Analysis of Information Assets based on Methodologies MAGERIT, OCTAVE y MEHARI; focused on Shipping Companies

García, Fresia Yanina Holguín; Moreta, Lohana Mariella Lema

doi:10.1109/cimps.2018.8625848

Cited by 5 publications

(2 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…• Controles: Los controles deben formar parte del Análisis de Riesgo, y no sólo de la Gestión del Riesgo: Gran parte de las metodologías consideran que los controles son ajenos al análisis de riesgos, y no lo consideran hasta la fase de gestión de riesgos [75]. • Capacidad Sectorial: Importancia de tener la capacidad en las metodologías de adaptarse a sectores específicos [48]. • Estructuras comunes de riesgo que soporten diferentes metodologías: Ante la diversidad de marcos de trabajo, ser capaces de crear una estructura común que pueda unificar las diferentes metodologías de riesgos [71].…”

Section: Tabla 1 Modelos Identificados Durante La Revisión Sistemáticaunclassified

Realizando una Revisión Sistemática de Metodologías ISRA orientadas a la Seguridad TIC. Periodo 2014-2019

Sánchez¹,

Santos-Olmo²,

Figueroa³

et al. 2020

Seguridad Informática. X Congreso Iberoamericano, CIBSI 2020

View full text Add to dashboard Cite

Section: Tabla 1 Modelos Identificados Durante La Revisión Sistemáticaunclassified

Realizando una Revisión Sistemática de Metodologías ISRA orientadas a la Seguridad TIC. Periodo 2014-2019

Sánchez¹,

Santos-Olmo²,

Figueroa³

et al. 2020

Seguridad Informática. X Congreso Iberoamericano, CIBSI 2020

View full text Add to dashboard Cite

“…In designing risk assessment methodologies, the two approaches that can be addressed are: assets and goals. Risk methodologies are widely used in the field of computer science, such as MAGERIT, which is based on the assessment of assets, and its process consists of identifying critical assets for the continuity of an organization's operations (García and Moreta 2018). MAGERIT also evaluates complementary assets that are used by critical assets to operate or have connectivity, such as switches or routers.…”

mentioning

confidence: 99%

Factors of Risk Analysis for IoT Systems

Andrade

Ortiz-Garcés

Tintin

et al. 2022

Risks

View full text Add to dashboard Cite

The increasing rate at which IoT technologies are being developed has enabled smarter and innovative solutions in the sectors of health, energy, transportation, etc. Unfortunately, some inherent characteristics of these technologies are compromised to attack. Naturally, risk analysis emerges, as it is one of many steps to provide a reliable security strategy. However, the methodologies of any risk analysis must first adapt to the dynamics of the IoT system. This article seeks to shed light on whatever factors are part of an IoT system and thus contribute to security risks, IoT device vulnerabilities, susceptibility due to the application domain, attack surfaces, and interdependence as a product of the interconnection between IoT devices. Consequently, the importance of these factors in any risk evaluation is highlighted, especially the interdependence generated by IoT systems, which can cause the generation of an uncontrollable cascade of effects that can occur under certain conditions of any systematic risk event.

show abstract

Security Risk Analysis in IoT Systems through Factor Identification over IoT Devices

et al. 2022

View full text Add to dashboard Cite

IoT systems contribute to digital transformation through the development of smart concepts. However, the IoT has also generated new security challenges that require security tools to be adapted, such as risk analysis methodologies. With this in mind, the purpose of our study is based on the following question: Which factors of IoT devices should be considered within risk assessment methodologies? We have addressed our study with a 4-phase design-research methodology (DRM) that allows us, based on systematic literature review, to experiment and draw upon expert judgment; as a final product, we obtain a risk assessment methodology based on the characteristics of IoT devices. At the end of this study, we establish seven main constructs—Organization, Risk Behaviors, Dependency, Attack Surface, Susceptibility, Severity and Uncertainty—over which security risk in IoT systems can be evaluated.

show abstract

Maturity Model for the Risk Analysis of Information Assets based on Methodologies MAGERIT, OCTAVE y MEHARI; focused on Shipping Companies

Cited by 5 publications

References 5 publications

Realizando una Revisión Sistemática de Metodologías ISRA orientadas a la Seguridad TIC. Periodo 2014-2019

Realizando una Revisión Sistemática de Metodologías ISRA orientadas a la Seguridad TIC. Periodo 2014-2019

Factors of Risk Analysis for IoT Systems

Security Risk Analysis in IoT Systems through Factor Identification over IoT Devices

Contact Info

Product

Resources

About