Information integrity estimation model for small and medium enterprise

Abstract

Information integrity plays an important role in the workflow of an enterprise. Therefore it is necessary to evaluate the integrity of different types of data used by an enterprise. Most existing solutions for evaluation of information integrity are based solely on hardware and software properties. Some solutions have information management process based evaluation, which requires security expert knowledge and work for asset, threat and vulnerability identification. This paper proposes a solution dedicated for small and medium enterprise, providing probabilistic metric of information integrity and requiring no security knowledge. This solution is based on information management structure and it integrates equipment integrity metrics from hardware and software risk assessment.