Quantitative Risk Management: a Survey of Adaptive Approaches to Risk Management for Information and Communication Systems
Raed Labassi, Mohamed Hamdi, Tai-hoon Kim · International Journal of u- and e- Service Science and Technology · 2015
Over the last few years, perspectives in information security have been drawn, to a large extent, by risk management. The extensive use of risk management methodologies in organizations relying on an IT infrastructure proves the potential of the practice. In this survey we discuss the characteristics of the quantitative risk management methodologies, compare them and provide an overview on how these methodologies are entwined with the concept of adaptive security. We also discuss the challenges of quantitative risk management and adaptive security models and propose reliable criteria to compare the different approaches in the literature.