Optimizing Security Efficiency through Effective Risk Management

Ghernaouti-Hélie, Solange; Tashi, Igli; Simms, D. J.

doi:10.1109/waina.2011.93

Cited by 4 publications

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…According to Ghernaouti-Helie, Simms, and Tashi [24] and Ponnam et al, [25], the main purpose of performing an effective risk assessment is to prioritize security efforts for valuable information assets, such as electronic and physical copies of student and financial information, which are vital to the continued operation of the institution. Because, for most organizations, the cost, in terms of personnel and financial resources, of mitigating all IS risks is impossible [6,13], it is important to have a method to prioritize risk mitigation efforts.…”

Section: Importance Of Is Risk Assessmentmentioning

confidence: 99%

“…Researchers and practitioners have provided various descriptions of the IS risk assessment process. Generally, these investigators include three overall phases in the risk assessment process: risk identification, risk analysis, and risk evaluation [28,29,30]. Other well-respected researchers of risk assessment methods include a fourth phase, that of risk mitigation planning [31,32,33,34,35,36].…”

Section: Key Elements Of An Is Risk Assessmentmentioning

confidence: 99%

See 1 more Smart Citation

Evaluation of Information Security Risk Assessment for Internet Banking Among Commercial Banks in Kenya

Jowi¹,

Abade²

2016

AJNC

View full text Add to dashboard Cite

Kenyan banks have exponentially embraced the use of information and communication technologies in their service provision. They have invested huge sums of money in implementing the self and virtual banking services with the objective of improving the quality of customer service. The study was conducted in the banking environment revealed that attaining high levels of business information integrity and overcoming users' security fears are of utmost concern. The study has also clearly established that more than coping with a technology change, a risk management strategy should address the issues related to the ethical and social areas. The study concludes that a strategy fit with appropriate, adaptable and sustainable information security solutions that addresses various social, ethical and technological issues would create a positive and secure environment that would welcome information security in banking sectors. In addition, well-formulated management strategies, security policies and data management processes that are developed with the required flexibility are the key aspects to a faultless security solution that could meet tomorrow's needs as well. In addition future studies should include the customer element to understand security issues from their viewpoint for a comprehensive information security solution in banks in Kenya.

show abstract

Section: Importance Of Is Risk Assessmentmentioning

confidence: 99%