Two-Dimensional Qualitative Asset Analysis Method based on Business Process-Oriented Asset Evaluation

In this paper, we dealt with substantial asset analysis methodology applied to twodimensional asset classification and qualitative evaluation method according to the business process. Most of the existent risk analysis methodology and tools presented classification by asset type and physical evaluation by a quantitative method. We focused our research on qualitative evaluation with 2-dimensional asset classification. It converts from quantitative asset value with purchase cost, recovery and exchange cost, etc. to qualitative evaluation considering specific factors related to the business process. In the first phase, we classified the IT assets into tangible and intangible assets, including human and information data asset, and evaluated their value. Then, we converted the quantitative asset value to the qualitative asset value using a conversion standard table. In the second phase, we reclassified the assets using 2-dimensional classification factors reflecting the business process, and applied weight to the first evaluation results. This method is to consider the organization characteristics, IT asset structure scheme and business process. Therefore, we can evaluate the concrete and substantial asset value corresponding to the organization business process, even if they are the same asset type.

[1]  Frank J. Groen,et al.  QRAS - the quantitative risk assessment system , 2006, Reliab. Eng. Syst. Saf..

[2]  Bingyang Zhou Risk analysis and assessment using object-oriented techniques , 1999, Proceedings Technology of Object-Oriented Languages and Systems (Cat. No.PR00393).

[3]  James W. Freeman,et al.  Risk assessment for large heterogeneous systems , 1997, Proceedings 13th Annual Computer Security Applications Conference.