Outsource or not? An AHP Based Decision Model for Information Security Management

Abstract

Purpose: Outsourcing information security has proven to be an efficient solution for information security management; however, it may not be the most suitable approach for every organization. This research aimed to develop a multi-criteria decision-making model that would enable organizations to determine which approach to information security management (outsourcing or internal management) is more suitable for their needs and capabilities.

Keywords

• information security
• decision model
• analytic hierarchy process
• ahp
• management
• outsourcing