Critical: Threat model for an outsourcing business
Komalpreet Kaur, Rishabh Sharma · 2017
The increasing dependence of business organizations on information systems has established information security as a serious concern for successful business operations. There are a series of security challenges related to process outsourcing which calls for a need of a proactive approach to detect threats and provides suitable guidelines for the same. One of the solutions for incorporating preventive security controls is to use Threat Modeling as a measure to ensure that security is implemented at an early stage. In this paper, a Threat Model has been proposed in accordance to business process outsourcing which assists in identifying security issues during the design phase of the process. It allows the corresponding decisions to be made rationally, with all the information on the table. Threat trees are also used for detail identification of threats. For the purpose of quantification of threats, DREAD Model has been used which helps in computing the security risks and prioritizing the threats. And ultimately, the Threat Model has been validated by implementing it on an outsourced process.