| Naslov: | Outsource or not? : An AHP based decision model for information security management |
|---|
| Avtorji: | ID Jelovčan, Luka (Avtor)
ID Mihelič, Anže (Avtor)
ID Prislan Mihelič, Kaja (Avtor) |
|---|
| Datoteke: |  Jelovcan-2022-Outsource_or_not__An_AHP_Based_D.pdf (1,97 MB)
MD5: D5A2AB031C1E483AA87543FFA297640F
 https://doi.org/10.2478/orga-2022-0010
|
|---|
| Jezik: | Angleški jezik |
|---|
| Vrsta gradiva: | Znanstveno delo |
|---|
| Tipologija: | 1.01 - Izvirni znanstveni članek |
|---|
| Organizacija: | FVV - Fakulteta za varnostne vede
|
|---|
| Opis: | Purpose: Outsourcing information security has proven to be an efficient solution for information security management; however, it may not be the most suitable approach for every organization. This research aimed to develop a multi-criteria decision-making model that would enable organizations to determine which approach to information security management (outsourcing or internal management) is more suitable for their needs and capabilities.
Methods: Our study utilized several different research methods. First, the decision criteria were identified by reviewing related work and then selected by information security experts in a focus group. Second, a survey was conducted among information security practitioners to assign the criteria weights. Third, four use cases were conducted with four real-world organizations to assess the usability, ease of use, and usefulness of the developed model.
Results: We developed a ten-criteria model based on the analytic hierarchy process. The survey results promote performance-related criteria as more important than efficiency-focused criteria. Evidence from use cases proves that the decision model is useful and appropriate for various organizations.
Conclusion: To make informed decisions on approaching information security management, organizations must first conduct a thorough analysis of their capabilities and needs and investigate potential external contractors. In such a case, the proposed model can serve as a useful support tool in the decision-making process to obtain clear recommendations tailored to factual circumstances. |
|---|
| Ključne besede: | information security, decision model, analytic hierarchy process, AHP, management, outsourcing |
|---|
| Status publikacije: | Objavljeno |
|---|
| Verzija publikacije: | Objavljena publikacija |
|---|
| Poslano v recenzijo: | 03.11.2021 |
|---|
| Datum sprejetja članka: | 28.04.2022 |
|---|
| Datum objave: | 23.05.2022 |
|---|
| Založnik: | Moderna organizacija |
|---|
| Leto izida: | 2022 |
|---|
| Št. strani: | Str. 142-159 |
|---|
| Številčenje: | Letn. 55, Št. 2 |
|---|
| PID: | 20.500.12556/DKUM-89184  |
|---|
| UDK: | 004.056:621.39 |
|---|
| COBISS.SI-ID: | 109986819 |
|---|
| DOI: | 10.2478/orga-2022-0010 |
|---|
| ISSN pri članku: | 1318-5454 |
|---|
| Datum objave v DKUM: | 24.06.2024 |
|---|
| Število ogledov: | 388 |
|---|
| Število prenosov: | 37 |
|---|
| Metapodatki: |    |
|---|
| Področja: | Ostalo
|
|---|
|
:
|
Kopiraj citat |
|---|
| | | | Skupna ocena: | (0 glasov) |
|---|
| Vaša ocena: | Ocenjevanje je dovoljeno samo prijavljenim uporabnikom. |
|---|
| Objavi na: |  |
|---|
Postavite miškin kazalec na naslov za izpis povzetka. Klik na naslov izpiše
podrobnosti ali sproži prenos. |
