Workshop-based risk assessment for the definition of secure business processes

2nd International Conference on Information, Process, and Knowledge Management, eKNOW 2010

Volumn , Issue , 2010, Pages 74-79

  Neubauer, Thomas ^a   Pehn, Markus ^b  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

^b Secure Business Austria   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PROCESS; DAMAGE POTENTIAL; DECISION MAKERS; DECISION PROBLEMS; SECURITY AWARENESS; SECURITY INVESTMENTS;

INVESTMENTS; KNOWLEDGE MANAGEMENT; RISK MANAGEMENT;

RISK ASSESSMENT;

EID: 77952263981     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/eKNOW.2010.8     Document Type: Conference Paper

References (18)

1. W. Auer-Rizzi. Entscheidungsprozesse in Gruppen - kognitive und soziale Verzerrungstendenzen. Wiesbaden, DUV, 1999.
2. E. Burnstein and A. Vinokur Testing two classes of thories about group-induced shifts in individual choice. J. Exp. Social Psychology, 13:315-332, 1973.
3. A. Ekelhart, S. Fenz, and T. Neubauer. Aurum: A framework for supporting information security risk management. In Proceedings of the 42nd Hawaii International Conference on System Sciences, HICSS2009, 2009. IEEE Computer Society.
4. A. Ekelhart, S. Fenz, and T. Neubauer. Ontology-based decision support for information security risk management. In International Conference on Systems, 2009. ICONS 2009., pages 80-85. IEEE Computer Society, March 2009.
5. A. Ekelhart, T. Neubauer, and S. Fenz. Automated risk and utility management. In 2009 Sixth International Conference on Information Technology: New Generations, pages 393- 398. IEEE Computer Society, 2009.
6. S. Fenz, A. Ekelhart, and T. Neubauer. Business process-based resource importance determination. In Proceedings of the 7th International Conference on Business Process Management (BPM'2009), pages 113-127. Springer, 2009.
7. A. Garg, J. Curtis, and H. Halper. Quantifying the financial impact of it security breaches. Information Management & Computer Security, 11/2:74-83, 2003.
8. P. Gruenbacher and R. Briggs. Surfacing tacit knowledge in requirements negotiation: Experiences using EasyWinWin. Proceedings of the 34th Hawaii International Conference on System Sciences, 34:1-8, 2001.
9. P. Hart. Psychological Studies of Policy Decisions and Fiascoes. Boston: Houghton Mufflin, 1982.
10. I. Janis. Groupthink in government: A study of small groups and policy failure. Swets & Zeitlinger, 1990.
11. T. Neubauer, A. Ekelhart, and S. Fenz. Interactive selection of iso 27001 controls under multiple objectives. In Proceedings of the Ifip Tc 11 23rd International Information Security Conference, IFIPSec 2008, volume 278/2008, pages 477-492, Boston, July 2008. Springer.
12. T. Neubauer and C. Stummer. Extending Business Process Management to Determine Efficient IT Investments. In Proceedings of the 2007 ACM Symposium on Applied Computing, pages 1250-1256, 2007.
13. T. Neubauer and C. Stummer. Interactive selection of Web services under multiple objectives. Information Technology and Management, Springer, 2009.
14. R. Nisbett and L. Ross. Human Inference: Strategies and Shortcomings of Social Judgement. Prentice Hall, 1980.
15. P. Slovic and S. Lichtenstein. Comparison of bayesian and regression approaches in the study of information processing in judgement. Organizational Behavior and Human Performance, 6:649-744, 1971.
16. A. Tversky and D. Kahneman. Availability: A heuristic for judging frequency and probability. Cognitive Psychology, 5:207-232, 1973.
17. A. Tversky and D. Kahneman. The framing of decisions and the psychology of choice. Science, 211:453-458, 1981.
18. M. Wallach, N. Kogan and D. Bem. Group influence on individual risk taking. J. Abnorm. Soc. Psychology, 65:75-86, 1962.