원문정보
초록
영어
Hazard analysis identifies probability to hazard occurrence and its potential impact on business processes operated in organizations. This paper illustrates a quantitative approach of hazard analysis of information systems by measuring the degree of hazard to information systems using probabilistic risk analysis and activity based costing technique. Specifically the research model projects probability of occurrence by PRA and economic loss by ABC under each identified hazard. To verify the model, each computerized subsystem which is called a business process and hazards occurred on information systems are gathered through one private organization. The loss impact of a hazard occurrence is produced by multiplying probability by the economic loss.
목차
1. Introduction
2. Previous Study
3. Research Model
3.1 Probability of hazard occurrence (Pi)
3.2 Loss Amount (Li)
4. Research Model Analysis
4.1 Analysls of Information System Asset
4.2 Hazard Analysis of Information Systems
4.3 Scenario Development of Hazard Analysis
4.4 Event Tree Modeling
4.5 Monte Carlo Simulation
4.6 Economic Loss Measurement by ABC
4.7 Result
5. Summary and Conclusion
Reference