In security management, the concept of security requirements has replaced risk analysis when assessing appropriate measurements. However, it is not clear how elicited requirements can be prioritized? State of the art methods to prioritize the holistic nature of security requirements are applicable only after major revisions. This dilemma is the starting-point for proposing a qualitative decision matrix approach which is quick and where the results are reproducible and sufficiently accurate. This article describes how the parameters for a prioritization are derived and how the prioritization is carried through. Copyright © 2005 by International Federation for Information Processing.
CITATION STYLE
Zuccato, A. (2005). A decision matrix approach: To prioritize holistic security requirements in e-commerce. In IFIP Advances in Information and Communication Technology (Vol. 181, pp. 35–49). Springer New York LLC. https://doi.org/10.1007/0-387-25660-1_3
Mendeley helps you to discover research relevant for your work.