Importance-Performance Analysis Based Evaluation Method for Security Incident Management Capability

摘要

SEI's Incident Management Capability Metrics provides an over-view of how the metrics can be used to evaluate and improve organizations' information security incident management capability. However, there still exist several deficiencies when using SEI's Metrics to measure the function areas of security incident management capability. An importance-performance analysis based evaluation method for measuring and improving organizations' information security incident management capability was proposed in this paper. The evaluation method produces a four-quadrant IPA matrix that considers both importance and performance simultaneously for better identifying function areas needing improvement. A numerical example of the evaluation method showed that the proposed method is efficient for deploying continuous improvement program and better allocating limited resources.