A Holistic, Collaborative, Knowledge-Sharing Approach for Information Security Risk Management

Information security risk management (ISRM) is a major concern of organizations worldwide. Although the number of existing ISRM methodologies is enormous, in practice a lot of resources are invested by organizations in creating new ISRM methodologies in order to capture more accurately the risks of their complex information systems. This is a crucial knowledge-intensive process for organizations, but in most cases it is addressed in an ad hoc manner. The existence of a systematic approach for the development of new or improvedI SRM methodologies would enhance the effectiveness of the process. In this paper we propose a systematic meta-process for developing new, or improved ISRM methods. We also present the specifications for a collaboration and knowledge-sharing platform supporting a virtual intra-organizational cross disciplinary team, which aims at improving its ISRM methodologies by adopting the proposed metaprocess.

1. Introduction

As the world grows more dependent on IT systems and processes, management of information technology (IT) risk becomes a practical necessity. [1].