Fuzzy logic inference system model for risk assessment in information technology and services environment

Abstract

Achieving security in ITS environment is a difficult task, one that is constantly evolving. With the development of technology over the last decades, risk assessments have become increasingly more complex. Availability of information for numerous risk parameters, affects the reliability of the risk assessment in information security processes. Due to that reason there is a need to develop a model that can contribute to increase of reliability of risk evaluation and reduction of subjectivity of the decision-maker regarding the risk level. In the paper, the authors proposed a concept to model the risk of specific processes in the system applying fuzzy logic and by using a procedure of expert valuation of weights of previously defined risk elements, their interrelation and relative importance compared to the total risk. ITS security process data for a specific company are incorporated into proposed model and validated with an example case.