Application of SIS framework on information system and its assessment

Abstract

A frame work SIS has been proposed to manage the risks possible in Information system. This Framework used both qualitative and quantitative approaches which has key processes like source code analysis, information acquirement, and SWOT. An information system developed is used for assessing that risk through this framework, results obtained were then compared with ENISA framework. The results have shown that risk assessed through both frameworks is not variant for the factors like technology, information and participants. However the high risk value is predicted by SIS framework for infrastructure.