Defining Secure Business Processes with Respect to Multiple Objectives

• Published in: 2008 Third International Conference on Availability, Reliability and Security pp. 187 - 194
• Main Authors: Neubauer, T., Heurix, J.
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01-03-2008
• Subjects: Availability; Business communication; Communication system operations and management; Companies; Costs; Data security; Information security; Investments; Multiobjective Decision Support; Risk Assessment; Risk management; Secure Business Processes; Security; Unified modeling language
• ISBN: 9780769531021; 0769531024
• DOI: 10.1109/ARES.2008.174

Business processes are of major importance in today's business environments, and their unimpeded execution is crucial for a company's success. Since business processes are permanently exposed to a variety of threats, organizations are forced to pay attention to security issues. Although the security of business activities is widely recognized as important, business processes and security aspects are often developed separately and without considering different objectives. This paper proposes a methodology that supports corporate decision makers with the elicitation of security requirements based on business processes, for the analysis of threats and vulnerabilities, and for the selection of appropriate security measures.