期刊名称：Proceedings of the International Conference on Business Excellence
电子版ISSN：2558-9652
出版年度：2020
卷号：14
期号：1
页码：521-530
DOI：10.2478/picbe-2020-0049
语种：English
出版社：Sciendo
摘要：The objective of this paper work is to create a mathematical approach that can quantify the need of implementing the ISO 27001 in a company and the actual benefits of doing so. The scope is to identify the factors that determine vulnerabilities,what damages are caused by these factors,the risk and impact level of the factors. The approach is from the point of view of costs caused by implementing the standard compared with costs of potential damage by not implementing.
