Metric Identification Evaluating Security Information: A Systematic Literature Review

Abstract

Metrics for the evaluation of information security basically contribute to risk reduction within organizations dealing with the manipulation of information. However, in information security metric approach, generally there is not a standard classified appreciation regarding essential metrics within the required scope to do this activity in risk reduction and asset protection. Therefore, this research is a Systematic Literature Review (SLR) regarding the evaluation of information security. In this study, 50 bibliographical data-base extracted articles such as ScienceDirect, Scopus, IEEE, ACM Digital Library, Hindawi, MDPI and Springer were gathered and analyzed. Scientific documents answered the proposed research question whereas results identified several information security metric classifications such as integrity, vulnerability, authorization and confidentiality.