Wyniki wyszukiwania - BazTech

Ograniczanie wyników

1 2009

Powiadomienia systemowe

Sesja wygasła!
Sesja wygasła!
Sesja wygasła!

Znaleziono wyników: 1

Liczba wyników na stronie

Wyniki wyszukiwania

Sortuj według:

Ogranicz wyniki do:

Wykorzystanie metody FMEA do analizy bezpieczeństwa informacji

Wolniak R., Burtan D.

Zarządzanie Przedsiębiorstwem

2009

Vol. 12, nr 1

70-84

The paper concentrates on FMEA method's implementation in Information System Security Management. On the base of TOORA's POLAN D example we present how implement FMEA method in problems common in security management. FMEA (Failure Mode and Effects Analysis) method is an inductive bottom-up of analyzing a system design or manufacturing process in order to evaluate the potential for failures. It consists of defining what can fail and the way it can fail (failure modes) and determining the effect of each failure mode on the system. An important part of a FMEA also includes analyzing the criticality, which is how harmful the effects of a failure mode are on system operation. Usual FMEA method was applied in typical industrial problems. But in the last decade there are many examples of using method in other cases such as: service quality, environmental management, etc. We think that FMEA method we can also implement to resolve and prevent safety management failures. Information is a valuable asset in any organization, whether it's printed or written on paper, stored electronically or sent by mail or electronic means. To effectively manage the threats and risks to your organization's information you should establish an Information Security Management System. But the system not always works well and there is a need to build tools in order to improve. As in the case of traditional FMEA we defined what can fail in the security system and the way it can fail. Then we determinate severity, occurrence and detection of all potential failures. The next step was to calculate risk priority number and also determine corrective and preventive action.