Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems

Askar Boranbayev; Seilkhan Boranbayev; Askar Nurbekov

doi:10.1007/978-3-030-39445-5_53

Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems

Askar Boranbayev, Seilkhan Boranbayev, Askar Nurbekov

Nazarbayev University

L.N. Gumilyov Eurasian National University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

14 Citations (Scopus)

Abstract

The article is devoted to the development of methods for identifying, assessing and neutralizing risks in order to ensure the reliability and security of information systems. The regulatory requirements for risk analysis in information systems have been developed. The methodology for analyzing information security risks in the banking sector has been developed and analyzed. Effective risk reduction strategies were used. Studied methods allow the user to receive a quantitative risk assessment of the system. This makes it possible to eliminate the need to use expensive resources to identify risks. Research was conducted on building an Information Security Risk Management System, measures and procedures for identifying, measuring, monitoring, controlling and minimizing information security risks. The purpose of the Information Security Risk Management System is to prevent and reduce the threat of negative consequences associated with the operation of information systems, as well as external factors affecting information systems. It is aimed at minimizing the risks in bank’s activities related to the violation of the integrity, confidentiality and availability of information systems.

Original language	English
Title of host publication	Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC
Editors	Kohei Arai, Supriya Kapoor, Rahul Bhatia
Publisher	Springer
Pages	733-742
Number of pages	10
ISBN (Print)	9783030394448
DOIs	https://doi.org/10.1007/978-3-030-39445-5_53
Publication status	Published - Jan 1 2020
Event	Future of Information and Communication Conference, FICC 2020 - San Francisco, United States Duration: Mar 5 2020 → Mar 6 2020

Publication series

Name	Advances in Intelligent Systems and Computing
Volume	1129 AISC
ISSN (Print)	2194-5357
ISSN (Electronic)	2194-5365

Conference

Conference	Future of Information and Communication Conference, FICC 2020
Country/Territory	United States
City	San Francisco
Period	3/5/20 → 3/6/20

Keywords

Method
Reliability
Risk analysis
Risk assessment
Safety

ASJC Scopus subject areas

Control and Systems Engineering
General Computer Science

Access to Document

10.1007/978-3-030-39445-5_53

Cite this

Boranbayev, A., Boranbayev, S., & Nurbekov, A. (2020). Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems. In K. Arai, S. Kapoor, & R. Bhatia (Eds.), Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC (pp. 733-742). (Advances in Intelligent Systems and Computing; Vol. 1129 AISC). Springer. https://doi.org/10.1007/978-3-030-39445-5_53

Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems. / Boranbayev, Askar; Boranbayev, Seilkhan; Nurbekov, Askar.
Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC. ed. / Kohei Arai; Supriya Kapoor; Rahul Bhatia. Springer, 2020. p. 733-742 (Advances in Intelligent Systems and Computing; Vol. 1129 AISC).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Boranbayev, A, Boranbayev, S & Nurbekov, A 2020, Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems. in K Arai, S Kapoor & R Bhatia (eds), Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC. Advances in Intelligent Systems and Computing, vol. 1129 AISC, Springer, pp. 733-742, Future of Information and Communication Conference, FICC 2020, San Francisco, United States, 3/5/20. https://doi.org/10.1007/978-3-030-39445-5_53

Boranbayev A, Boranbayev S, Nurbekov A. Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems. In Arai K, Kapoor S, Bhatia R, editors, Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC. Springer. 2020. p. 733-742. (Advances in Intelligent Systems and Computing). doi: 10.1007/978-3-030-39445-5_53

Boranbayev, Askar ; Boranbayev, Seilkhan ; Nurbekov, Askar. / Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems. Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC. editor / Kohei Arai ; Supriya Kapoor ; Rahul Bhatia. Springer, 2020. pp. 733-742 (Advances in Intelligent Systems and Computing).

@inproceedings{2cc5f12724464e68a84ec4d2b045e19d,

title = "Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems",

abstract = "The article is devoted to the development of methods for identifying, assessing and neutralizing risks in order to ensure the reliability and security of information systems. The regulatory requirements for risk analysis in information systems have been developed. The methodology for analyzing information security risks in the banking sector has been developed and analyzed. Effective risk reduction strategies were used. Studied methods allow the user to receive a quantitative risk assessment of the system. This makes it possible to eliminate the need to use expensive resources to identify risks. Research was conducted on building an Information Security Risk Management System, measures and procedures for identifying, measuring, monitoring, controlling and minimizing information security risks. The purpose of the Information Security Risk Management System is to prevent and reduce the threat of negative consequences associated with the operation of information systems, as well as external factors affecting information systems. It is aimed at minimizing the risks in bank{\textquoteright}s activities related to the violation of the integrity, confidentiality and availability of information systems.",

keywords = "Method, Reliability, Risk analysis, Risk assessment, Safety",

author = "Askar Boranbayev and Seilkhan Boranbayev and Askar Nurbekov",

note = "Publisher Copyright: {\textcopyright} Springer Nature Switzerland AG 2020. Copyright: Copyright 2020 Elsevier B.V., All rights reserved.; Future of Information and Communication Conference, FICC 2020 ; Conference date: 05-03-2020 Through 06-03-2020",

year = "2020",

month = jan,

day = "1",

doi = "10.1007/978-3-030-39445-5\_53",

language = "English",

isbn = "9783030394448",

series = "Advances in Intelligent Systems and Computing",

publisher = "Springer",

pages = "733--742",

editor = "Kohei Arai and Supriya Kapoor and Rahul Bhatia",

booktitle = "Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC",

address = "Germany",

}

TY - GEN

T1 - Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems

AU - Boranbayev, Askar

AU - Boranbayev, Seilkhan

AU - Nurbekov, Askar

PY - 2020/1/1

Y1 - 2020/1/1

N2 - The article is devoted to the development of methods for identifying, assessing and neutralizing risks in order to ensure the reliability and security of information systems. The regulatory requirements for risk analysis in information systems have been developed. The methodology for analyzing information security risks in the banking sector has been developed and analyzed. Effective risk reduction strategies were used. Studied methods allow the user to receive a quantitative risk assessment of the system. This makes it possible to eliminate the need to use expensive resources to identify risks. Research was conducted on building an Information Security Risk Management System, measures and procedures for identifying, measuring, monitoring, controlling and minimizing information security risks. The purpose of the Information Security Risk Management System is to prevent and reduce the threat of negative consequences associated with the operation of information systems, as well as external factors affecting information systems. It is aimed at minimizing the risks in bank’s activities related to the violation of the integrity, confidentiality and availability of information systems.

AB - The article is devoted to the development of methods for identifying, assessing and neutralizing risks in order to ensure the reliability and security of information systems. The regulatory requirements for risk analysis in information systems have been developed. The methodology for analyzing information security risks in the banking sector has been developed and analyzed. Effective risk reduction strategies were used. Studied methods allow the user to receive a quantitative risk assessment of the system. This makes it possible to eliminate the need to use expensive resources to identify risks. Research was conducted on building an Information Security Risk Management System, measures and procedures for identifying, measuring, monitoring, controlling and minimizing information security risks. The purpose of the Information Security Risk Management System is to prevent and reduce the threat of negative consequences associated with the operation of information systems, as well as external factors affecting information systems. It is aimed at minimizing the risks in bank’s activities related to the violation of the integrity, confidentiality and availability of information systems.

KW - Method

KW - Reliability

KW - Risk analysis

KW - Risk assessment

KW - Safety

UR - http://www.scopus.com/inward/record.url?scp=85081547910&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85081547910&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-39445-5_53

DO - 10.1007/978-3-030-39445-5_53

M3 - Conference contribution

AN - SCOPUS:85081547910

SN - 9783030394448

T3 - Advances in Intelligent Systems and Computing

SP - 733

EP - 742

BT - Advances in Information and Communication - Proceedings of the 2020 Future of Information and Communication Conference FICC

A2 - Arai, Kohei

A2 - Kapoor, Supriya

A2 - Bhatia, Rahul

PB - Springer

T2 - Future of Information and Communication Conference, FICC 2020

Y2 - 5 March 2020 through 6 March 2020

ER -

Development of the Technique for the Identification, Assessment and Neutralization of Risks in Information Systems

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this