Article citationsMore>>

Lili Sun, R. P. Srivastava and T. J. Mock, “An Information Systems Security Risk Assessment Model under Dempster-Shafer Theory of Belief Functions,” Journal of Management Information Systems, Vol. 22, No. 4, 2006, pp. 109-142. doi:10.2753/MIS0742-1222220405

has been cited by the following article:

• TITLE: A Socio-Technical Approach to Cyber Risk Management and Impact Assessment

  AUTHORS: Konstantinia Charitoudi, Andrew Blyth

  KEYWORDS: Impact Assessment; Risk Management; Socio-Technical Systems

  JOURNAL NAME: Journal of Information Security, Vol.4 No.1, January 30, 2013

  ABSTRACT: Technology is increasingly being used by organisations to mediate social/business relationships and social/business transactions. While traditional models of impact assessment have focused on the loss of confidentiality, integrity and availability, we propose a new model based upon socio-technical systems thinking that places the people and the technology within an organisation’s business/functional context. Thus in performing risk management in a cyber security and safety context, a detailed picture of the impact that a security/safety incident can have on an organisation is developed. This in turn stimulates a more holistic view of the effectiveness, and appropriateness, of a counter measure.