20.500.12556/DKUM-89184 Outsource or not? An AHP based decision model for information security management Purpose: Outsourcing information security has proven to be an efficient solution for information security management; however, it may not be the most suitable approach for every organization. This research aimed to develop a multi-criteria decision-making model that would enable organizations to determine which approach to information security management (outsourcing or internal management) is more suitable for their needs and capabilities. Methods: Our study utilized several different research methods. First, the decision criteria were identified by reviewing related work and then selected by information security experts in a focus group. Second, a survey was conducted among information security practitioners to assign the criteria weights. Third, four use cases were conducted with four real-world organizations to assess the usability, ease of use, and usefulness of the developed model. Results: We developed a ten-criteria model based on the analytic hierarchy process. The survey results promote performance-related criteria as more important than efficiency-focused criteria. Evidence from use cases proves that the decision model is useful and appropriate for various organizations. Conclusion: To make informed decisions on approaching information security management, organizations must first conduct a thorough analysis of their capabilities and needs and investigate potential external contractors. In such a case, the proposed model can serve as a useful support tool in the decision-making process to obtain clear recommendations tailored to factual circumstances. information security decision model analytic hierarchy process AHP management outsourcing informacijska varnost odločitveni model analitični hierarhični proces AHP management zunanje izvajanje true false true Moderna organizacija Angleški jezik Slovenski jezik Znanstveno delo 2024-06-24 10:05:37 2024-06-24 10:28:24 2024-06-25 03:19:23 0000-00-00 00:00:00 2022 0 0 Str. 142-159 Št. 2 Letn. 55 2022 0000-00-00 Zaloznikova Objavljeno NiDoloceno 2021-11-03 2022-04-28 2022-05-23 004.056:621.39 109986819 10.2478/orga-2022-0010 1318-5454 Jelovcan-2022-Outsource_or_not__An_AHP_Based_D.pdf Jelovcan-2022-Outsource_or_not__An_AHP_Based_D.pdf 1 D5A2AB031C1E483AA87543FFA297640F 5d57907a56758612304906edcbce41983f959e3b4b69505944412d60df345dee e80d1a8e-3202-11ef-a99d-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=180733 https://doi.org/10.2478/orga-2022-0010 0 8c096d9b-3200-11ef-a99d-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=180732 Fakulteta za varnostne vede 0 0 0