[Zurück]


Vorträge und Posterpräsentationen (mit Tagungsband-Eintrag):

S. Fenz, A. Ekelhart, T. Neubauer:
"Business Process-based Resource Importance Determination";
Vortrag: 7th International Conference on Business Process Management (BPM'2009), Ulm, Germany; 08.09.2009 - 10.09.2009; in: "Proceedings of the 7th International Conference on Business Process Management (BPM'2009)", Springer, Lecture Notes in Computer Science, Volume 5701 (2009), S. 113 - 127.



Kurzfassung englisch:
Information security risk management (ISRM) heavily depends on realistic impact values representing the resources´ importance in the overall organizational context. Although a variety of ISRM approaches have been proposed, well-founded methods that provide an answer to the following question are still missing: How can business processes be used to determine resources´ importance in the overall organizational context? We answer this question by measuring the actual importance level of resources based on business processes. Therefore, this paper presents our novel business process-based resource importance determination method which provides ISRM with an efficient and powerful tool for deriving realistic resource importance figures solely from existing business processes. The conducted evaluation has shown that the calculation results of the developed method comply to the results gained in traditional workshop-based assessments.


"Offizielle" elektronische Version der Publikation (entsprechend ihrem Digital Object Identifier - DOI)
http://dx.doi.org/10.1007/978-3-642-03848-8_9

Elektronische Version der Publikation:
http://publik.tuwien.ac.at/files/PubDat_185911.pdf



Zugeordnete Projekte:
Projektleitung A Min Tjoa:
Security Ontologies


Erstellt aus der Publikationsdatenbank der Technischen Universität Wien.