Information Security Policy Decision Making: An Analytic Hierarchy Process Approach

This paper addresses the use of a specific decision support methodology in operational research termed the analytic hierarchy process (AHP). We examine the application of AHP method in guiding information security policy decision making with respect to Indonesia. We suggest four aspects of information security policy, namely management, technology, economy and culture. In addition, information security components derived from literature review are applied which are confidentiality, integrity and availability. Based on information security policy aspects and information security components we introduce our AHP based model of government information security policy. Our examination of this model shows how AHP can help policy makers to produce appropriate decisions. It is found that AHP shows a robust and encompassing treatment useful for decision makers in both qualitative and quantitative ways. Therefore, it is reasonable to apply AHP for larger scope of research.