Information security risks assessment and management framework

Abstract

Providing of information security becomes very essential for modern telecommunication networks. This task is often decided from the perspective of information security risks, but some problems arise in practice with risks assessment and management in quantitative form. They are uncertain, incomplete, fuzzy and qualitative character of source information about existing threats and vulnerabilities. In this paper we developed the framework for quantitative information security risks assessment and management under these challenges. We used the framework for risks assessment and management in electronic trading platform and found the optimal set of security safeguards.