Logistic Information Risk Management Model Based on MP²DR² Security Control Matrix
Junjie Lv, Hanpo Hou, Haoxiong Yang · Logistics · 2009
With the constant improvement of information flow, information management methods, especially for shared information, play an increasingly important role in logistic enterprises. In this paper, we propose a logistic information classification method according to their sharing way and divide logistic enterprises' security requirements into six categories based on MP2DR2 model. We propose the ordering method about different types of control measurements by establishing the correspondence relation between threats and control measures and defining effects of certain controls to different information sources and threats. This logistic information risk management method is suitable to logistic enterprises' environment considering shared information characteristics and six aspects of security requirements.