Collaboration and Knowledge Sharing Platform for Supporting a Risk Management Network of Practice

Abstract

The management of information security risk is a major concern of organizations worldwide. Although the number of existing information security risk management methodologies is enormous, in practice a lot of resources are invested by organizations in creating new information security risk management methodologies. This is a crucial knowledge- intensive process for organizations, but in most cases it is addressed in an ad hoc manner. We believe that the existence of a systematic approach for the development of new (and the improvement of existing) information security risk management methodologies would enhance the effectiveness of the process. In this paper we propose a systematic meta-process for developing new, or improving existing, information security risk management methods. We also present our vision for a collaboration and knowledge-sharing platform capable of supporting a virtual intra-organizational cross-disciplinary team, which aims at improving information security risk management methodologies by adopting the proposed meta-process.