首页> 外文会议>International Conference on Software Process Improvement >Maturity Model for the Risk Analysis of Information Assets based on Methodologies MAGERIT, OCTAVE y MEHARI; focused on Shipping Companies
【24h】

Maturity Model for the Risk Analysis of Information Assets based on Methodologies MAGERIT, OCTAVE y MEHARI; focused on Shipping Companies

机译:基于方法的信息资产风险分析成熟度模型Magerit,Octave Y Mehari;专注于船公司

获取原文

摘要

The aim of this essay is the proposal of a Maturity Model for the risk analysis of information assets in shipping companies, which provides opportunities for technological and consequently business improvement, based on the best practices of MAGERIT, OCTAVE and MEHARI methodologies. The proposed model is based on literature review about main risk concepts; for its design those defined in the Capability Maturity Model Integration (CMMI) structure were established as maturity levels; in addition, a control map was defined to guide compliance by levels to incorporate the selected best practices. The resulting model has been validated by a group of experts using the Delphi technique, in order to obtain a quantitative assessment of its applicability in the shipping companies. As a main result, it was obtained that the model involves the execution of a formalized risk analysis process and with proactive techniques for the shipping entities.
机译:本文的目的是运输公司信息资产风险分析的成熟度模型,这为技术而言,基于Magerit,Octave和Mehari方法的最佳实践提供了技术和后果的业务改进。拟议的模型基于关于主要风险概念的文献综述;因为它的设计在能力成熟度模型集成(CMMI)结构中定义的设计是成熟水平的;此外,定义了一个控制图以指导遵守水平,以包含所选择的最佳实践。通过使用Delphi技术的一组专家验证了所得模型,以便在运输公司中对其适用性进行定量评估。作为主要结果,获得了该模型涉及执行正式风险分析过程,并为运输实体提供主动技术。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号