rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    title: RA Whiz - risk assessment automation for an information security management system
  name:
    name part: Nor Aza Ramli
    role:
      role term: creator
  name:
    name part: International Islamic University Malaysia
    name part: Department of Computer Science
  genre: Theses, IIUM local
  origin info:
    place:
      place term: my
    place:
      place term: Gombak, Selangor
    publisher: Kulliyyah of Information and Communication Technology, International Islamic University Malaysia
    date issued: 2016
  language:
    language term: eng
  physical description:
    extent: xiv, 114 leaves : ill. ; 30cm.
  abstract: Information is a business asset that needs to be accessed and processed for it to bring value to the business. The use of technologies in handling information introduces information security risks that are inherited from flaws and weaknesses in the implementation of these technologies. Information security risks could be addressed systematically by having a comprehensive management system in place. ISO/IEC 27001 is a standard for information security management system (ISMS). It is published in a joint effort by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard introduces a risk-based approach in managing information security. A risk assessment exercise for an ISMS implementation requires human expertise with comprehensive understanding and considerable knowledge in information security. Risk assessment exercise is based on three steps; identification, analysis and evaluation. There are available tools which cater for the automation of the analysis and evaluation steps. However, there is still a lack of automation in an overall information security risk area. This could be due to the fact that the analysis and evaluations phases are based on risk assessment approach whereas the identification phase requires specific knowledge in information security risks. This work aims to automate the risk identification process by studying key parameters in risk assessment and develop relationship models of these parameters. Scopes undertaken by ISMS certified organizations in Malaysia will be analyzed to determine a significant scope for this study. Key parameters for risk assessment will be identified and relationship models will be developed for these parameters. The key parameters are assets with explicit grouping and definitions, corresponding threats and vulnerabilities. Asset relationship model presents a link between three types of assets. This model demonstrates the idea of information container…
  note: by Nor Aza Ramli
  note: Thesis (MCS)--International Islamic University Malaysia, 2016.
  note: Includes bibliographical references (leaves 111-114).
  subject:
    geographic code: a-my---
  classification: TK5105.59
  identifier: http://studentrepo.iium.edu.my/handle/123456789/5520
  record info:
    record content source: UIAM
    record creation date: 160525
    language of cataloging:
      language term: eng