Resumen

JIMENEZ-MARTIN, Antonio; VICENTE, Eloy  y  MATEOS, Alfonso. Safeguard selection for risk management in information systems: a fuzzy approach. RISTI [online]. 2015, n.15, pp.83-100. ISSN 1646-9895.  https://doi.org/10.1013/risti.15.83-100.

In this paper we focus on the safeguard selection within the risk analysis and management in information systems (IS) under a fuzzy perspective. Preventive safeguards can be implemented to reduce the risk associated with potential threats in IS, whereas palliative safeguards reduce the probability of failure transmission through the assets network. However, safeguards have associated costs and a selection process has then to be carried out. We describe optimization problems associated with different perspectives on the selection of safeguards and propose solution techniques based on dynamic programming and the use of metaheuristics.

Palabras clave : Risk analysis and management; information systems; safeguard selection; fuzzy logic; optimization.

        · resumen en Español     · texto en Español     · Español ( pdf )