sami haji - Academia.edu (original) (raw)
Uploads
Papers by sami haji
International Journal of Advanced Trends in Computer Science and Engineering, Feb 15, 2019
Many industry standards and methodologies were introduced which has brought forth the management ... more Many industry standards and methodologies were introduced which has brought forth the management of threats assessment and risk management of information assets in a systematic manner. This paper will review and analyze the main processes followed in IT risk management frameworks from the perspective of the threat analysis process using a threat modeling methodology. In this study, the authors propose a new assessment model which shows that systematic threat analysis is an essential element to be considered as an integrated process within IT risk management frameworks. The new proposed model complements and fulfills the gap in the practice of assessing information security risks.
International Journal of Advanced Trends in Computer Science and Engineering, Feb 15, 2019
Many industry standards and methodologies were introduced which has brought forth the management ... more Many industry standards and methodologies were introduced which has brought forth the management of threats assessment and risk management of information assets in a systematic manner. This paper will review and analyze the main processes followed in IT risk management frameworks from the perspective of the threat analysis process using a threat modeling methodology. In this study, the authors propose a new assessment model which shows that systematic threat analysis is an essential element to be considered as an integrated process within IT risk management frameworks. The new proposed model complements and fulfills the gap in the practice of assessing information security risks.