A situation awareness model for information security risk management

作者：Webb Jeb; Ahmad Atif; Maynard Sean B^*; Shanks Graeme

来源：Computers & Security, 2014, 44: 1-15.

DOI：10.1016/j.cose.2014.04.005

• Information security management
• Information security risk management
• Information security intelligence
• Information security compliance
• Information security investigation
• Evidence-based information security
• Situation awareness
• Situation awareness theory

Information security risk management (ISRM) is the primary means by which organizations preserve the confidentiality, integrity and availability of information resources. A review of ISRM literature identified deficiencies in the practice of information security risk assessment that inevitably lead to poor decision-making and inadequate or inappropriate security strategies. In this conceptual paper, we propose a situation aware ISRM (SA-ISRM) process model to complement the information security risk management process. Our argument is that the model addresses the aforementioned deficiencies through an enterprise-wide collection, analysis and reporting of risk-related information. The SA-ISRM model is adapted from Endsley's situation awareness model and has been refined using our findings from a case study of the US national security intelligence enterprise.

• 出版日期2014-7