An information security incident prioritization method

Operative response to incidents is an important aspect of information security management. In the modern information systems, each day can be hundreds of information security incidents. Since resources of the incident response teams are limited, simultaneous processing of several incidents requires determination the incident priorities and distribution of resources among them in accordance with priorities. The paper highlights the main factors affecting the priority of information security incidents and proposes a method for prioritizing incidents based on fuzzy analytic hierarchy process.