Rabiah Ahmad
Recent information technologies are able to facilitate the transformation of traditional administrative processes to services which can be performed online. The rapid growth of ICT is proved to be aligned with its application for the 4th Industry Revolution. Today, information security has become a vital entity to most organizations due to current trends in information transfer through a borderless and vulnerable world. The concern and interest in information security is mainly due to the fact that information security risk analysis (ISRA) is seen as a focal method not only to identify and prioritize information assets but also to identify and monitor the specific threats that an organization induces; especially the chances of these threats occurring and their impact on the respective businesses. Thus, a total of 18 years research in Information Security was conducted, and their findings were gathered and analysed meticulously. Most of the researches were particularly focusing in exploring the various aspect of security threats and its countermeasure through empirical researches, tool development, systematic literature review and dynamic analysis impacted from theoretical knowledge development to its implementation growth in Organization. Our reviews suggested that risks analysis demand critical and deep research to make sure they are able to introduce effective security counter measure. Our research focused on critical information infrastructure such as Healthcare, Power System and Manufacturing. One of the study, we applied empirical study to categorize threats and calculate risks for Healthcare system. In addition to that we developed tool using Machine Learning to explore various type of risks categories using the same dataset.
Comparte este artículo