Information security risk assessment using the AHP method

Abstract

This paper is concerned with the issues of cybersecurity and it presents AHP multi-criteria analysis methodology applied for assessing the level of real threats arising from cyberspace that affect the information security. Based on the results of surveys conducted among employees of a selected state institution, we carried out an analysis of awareness of the dangers of cyberspace and ways employees respond to incidents in systems. Taking into account the research results, an appropriate mechanism for the provision of an adequate level of information security was proposed.