| Title: | Outsource or not? : An AHP based decision model for information security management |
|---|
| Authors: | ID Jelovčan, Luka (Author)
ID Mihelič, Anže (Author)
ID Prislan Mihelič, Kaja (Author) |
|---|
| Files: |  Jelovcan-2022-Outsource_or_not__An_AHP_Based_D.pdf (1,97 MB)
MD5: D5A2AB031C1E483AA87543FFA297640F
 https://doi.org/10.2478/orga-2022-0010
|
|---|
| Language: | English |
|---|
| Work type: | Scientific work |
|---|
| Typology: | 1.01 - Original Scientific Article |
|---|
| Organization: | FVV - Faculty of Criminal Justice and Security
|
|---|
| Abstract: | Purpose: Outsourcing information security has proven to be an efficient solution for information security management; however, it may not be the most suitable approach for every organization. This research aimed to develop a multi-criteria decision-making model that would enable organizations to determine which approach to information security management (outsourcing or internal management) is more suitable for their needs and capabilities.
Methods: Our study utilized several different research methods. First, the decision criteria were identified by reviewing related work and then selected by information security experts in a focus group. Second, a survey was conducted among information security practitioners to assign the criteria weights. Third, four use cases were conducted with four real-world organizations to assess the usability, ease of use, and usefulness of the developed model.
Results: We developed a ten-criteria model based on the analytic hierarchy process. The survey results promote performance-related criteria as more important than efficiency-focused criteria. Evidence from use cases proves that the decision model is useful and appropriate for various organizations.
Conclusion: To make informed decisions on approaching information security management, organizations must first conduct a thorough analysis of their capabilities and needs and investigate potential external contractors. In such a case, the proposed model can serve as a useful support tool in the decision-making process to obtain clear recommendations tailored to factual circumstances. |
|---|
| Keywords: | information security, decision model, analytic hierarchy process, AHP, management, outsourcing |
|---|
| Publication status: | Published |
|---|
| Publication version: | Version of Record |
|---|
| Submitted for review: | 03.11.2021 |
|---|
| Article acceptance date: | 28.04.2022 |
|---|
| Publication date: | 23.05.2022 |
|---|
| Publisher: | Moderna organizacija |
|---|
| Year of publishing: | 2022 |
|---|
| Number of pages: | Str. 142-159 |
|---|
| Numbering: | Letn. 55, Št. 2 |
|---|
| PID: | 20.500.12556/DKUM-89184  |
|---|
| UDC: | 004.056:621.39 |
|---|
| ISSN on article: | 1318-5454 |
|---|
| COBISS.SI-ID: | 109986819 |
|---|
| DOI: | 10.2478/orga-2022-0010 |
|---|
| Publication date in DKUM: | 24.06.2024 |
|---|
| Views: | 385 |
|---|
| Downloads: | 37 |
|---|
| Metadata: |    |
|---|
| Categories: | Misc.
|
|---|
|
:
|
Copy citation |
|---|
| | | | Average score: | (0 votes) |
|---|
| Your score: | Voting is allowed only for logged in users. |
|---|
| Share: |  |
|---|
Hover the mouse pointer over a document title to show the abstract or click
on the title to get all document metadata. |
