The Systemic Approach to Information Protection in Relation to Risk in an Integrated Information Security System

Abstract:

This paper presents an approach to the risk of information security. By taking into consideration how critical it is for a system, each category of information should be associated with a correspondent level of security risk and each level of security risk must be defined by appropriate measures to control the risks for information security. Equally important is how many levels of security risk are defined for information, or how they are classified. It is critical, however, that the model adopted reflects all the objectives that the system requires.

• Periodical: Applied Mechanics and Materials (Volume 760)
• Pages: 689-694
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.760.689
• Online since: May 2015
• Authors: Nicolae Anton*, Anișor Nedelcu
• Keywords: Information, Information Protection, Risk, Systemic Analysis, Threat, Vulnerability

References

[1] S. Popa, Concepts information security in: Security of the information systems, Alma Mater Publishing, Bacau, 2007, p.6.

[2] ISO Guide 73, Risk Management – Vocabulary – Guidelines for use in standards, Geneva, (2002).

[3] NIST – SP 800 – 30, Risk Management Guide for Information Technology Systems, July (2002).

[4] B. Blakley, E. McDermott, D. Geer, Information Security is Information Risk Management, ACM Digital Library, New Mexico, USA, (2001).

[5] D. Oprea, Protection and Security Information, Polirom Publishing, Iași, (2003).

[6] M. Harkins, The misperception of risk in: Managing Risk and Information Security, Apress Media, 2013, pp.15-16.