Mobile Information Security Risk Calculator

Computer information systems have in recent years found increasing applications in all facets of human endeavor owing to the rapid improvement in processing and storage technologies, the advent of the internet, as well as availability and reduced costs of computing resources. Consequently, organizations and businesses heavily depend on computer information systems and the internet to effectively manage their operations which often contain proprietary, confidential and safety critical information, which exposes important computing resources and information assets to security threats. This paper examines different quantitative information security risk assessment methodologies used to protect and/or manage organizational information systems from physical and cyber-attacks. The authors then developed a mobile, intuitive, interactive and user-friendly tool, the Mobile Risk Calculator, that visualizes the entire quantitative risk assessment process and helps organizations determine the degree of threats to their information security systems in order to make right decisions about risks. It is expected to facilitate teaching, learning and understanding of Quantitative Information Security Risk Management processes for both industry experts and beginners who need to have the basic knowledge of information security risks and its management. The tool was implemented both on an Android Virtual Device (Android Emulator) and real-life android mobile devices, and initial evaluation feedbacks show that it performs better than existing methodologies. It is intuitive, interactive portable and less complex, facilitating learning and understanding of the Risk Analysis Process.