FAHP-TOPSIS risks ranking models in ISMS

One of the main features of the Information security management system which should be performed according to the organization requirements is the information security risk management. Risk evaluation and risk ranking is a key procedure in this management activity. This research introduces a new method for ranking risks of information security by using two decision making models, TOPSIS model and AHP in fuzzy environment. Comparing test results of the new FAHP-TOPSIS model with the FAHP model shows that the average weights of new model has increased dramatically with smaller error ratio and provides more precise results.