Information assurance evaluation for network information systems

Abstract

In both the public and private sectors, organizations have become significantly depend over on the proper functioning of information systems. As security spending continues to rise, organizations contend that metrics initiatives will become critical to managing and understanding the impact of information security programs. This paper reviews information assurance (IA) conceptions from viewpoint of system science and analyses the construction of IA systems. An IA evaluation model is addressed in this paper, which is depicted by IA capability index, IA countermeasure index and IA cost index. This evaluation model can be used for organizations to assess their IA strategies and analyzes their security state. © Springer-Verlag Berlin Heidelberg 2007.