A Framework for risk assessment of information technology in the corporate environment
Laerte Peotta, Paulo Roberto de Lira Gondim · The International Journal of Forensic Computer Science · 2007
The growing need for transparency in business negotiations requires greater control of technological risks. However, technological risk assessment tools currently available in the market are imprecise as they are based on the analysis of events that have already passed. The current paper describes a real-time, proactive risk analysis framework. We propose that instead of testing vulnerabilities from an external point of view, agents be incorporated and distributed into actives (hardware and software) so as to be able to provide application, confi guration and specifi c localization information. In this manner, changes noted will be divulged by the agent in an immediate and pro-active manner to a central repository. When vulnerabilities are detected, correction processes will be implemented automatically, permitting technological risks to be monitored in real-time.