Development of the ISR3M model for IS risk management evaluation using the Focus Area structure according to the MMDPIS generic process
Mina El Maallam, Abdelaziz Kriouile · Transactions on Machine Learning and Artificial Intelligence · 2014
Risk management (RM) is one of the main IS governance pillars. However, to remain a center of profit and cost optimization for the company, this activity must be evaluated, monitored and improved continuously. Hence the interest to develop an IS risk management maturity model. This paper aims to address this need by providing the ISR3M (Information System Risk Management Maturity Model) model. After a summary of literature review, it presents the design approach, then describes the model and evaluates it.