A Security Risk Management Metric for Cloud Computing Systems

2. Information Security Risks Management

Individual or enterprise users rely on information systems to be secured and able to predict their risk and their strategies in reducing these risks. Thus, it is an investment to be measured in dollars saved as a result of reduced losses from security breaches, or in profits from new ventures that would be too risky to undertake without investments in security (Schechter, 2004). It represents, for instance, an essential business function that allows organizations to perform with some difficulties their operations and deliver services to the public (Chew et al., 2009).

The drive to secure organizational information has initiated the need to develop better measures for understanding the situation of the organization’s security attitude (Bryant, 2009). For more explanation, Wang states in Wang et al. (2009) that is widely acknowledged that metrics are essential to information security because they can be an efficient tool to measure the security strength and levels of their systems, products, processes, and readiness to address security concerns that they are face.