A Huiristic Method for Information Scaling in Manufacturing Organizations | Zendy

Ghasem Rezaei | Zendy; Majid Ansari | Zendy; Ashkan Memari | Zendy; Seyed Mojib Zahraee | Zendy; Awaluddin Mohamed Shaharoun | Zendy

AI Assistant Blog Pricing

Home ZAIA Blog

Open Access

A Huiristic Method for Information Scaling in Manufacturing Organizations

Author(s) -

Ghasem Rezaei,

Majid Ansari,

Ashkan Memari,

Seyed Mojib Zahraee,

Awaluddin Mohamed Shaharoun

Publication year - 2014

Publication title -

jurnal teknologi

Language(s) - English

Resource type - Journals

eISSN - 2180-3722

pISSN - 0127-9696

DOI - 10.11113/jt.v69.3150

Subject(s) - asset (computer security) , vulnerability (computing) , certification , business , risk analysis (engineering) , risk assessment , information security management system , order (exchange) , process (computing) , information security , operations management , computer science , computer security , finance , engineering , cloud computing , economics , security information and event management , management , cloud computing security , operating system

Protecting information assets is very vital to the core survival of an organization. By increasing in cyber-attacks and viruses worldwide, it has become essential for organizations to adopt innovative and rigorous procedures to keep these vital assets out of the reach of exploiters. Although worldwide complying with an international information security standard such as ISO 27001 has been raised, with over 7000 registered certificates, few Iranian companies are under ISO 27001 certified. Also organization needs to perform a risk assessment in order to determine the organization's asset exposure to risk and determine the best way to manage this. The determination of risk within the methodology is based upon the standard formula, which the risk is calculated from the multiplication of the asset value, threats and vulnerability. The ISO 27001 requires is that 'An appropriate risk assessment shall be undertaken'. One of the main factors for risk assessment is identifying and scoring of Information asset in this process. Due to different values of asset in organizations, the main purpose of this study is to identify and investigate a weighted method to assign different values of assets in order to minimize vulnerability in manufacturing systems. This study also aims at improving asset value scoring by using heuristic methods. A real world case study was selected for implementation of this approach based on ISO27001` in Iran.

The content you want is available to Zendy users.

Already have an account? Click here to sign in.

Having issues? You can contact us here

Accelerating Research