Reliability analysis of risk model metrics based on business approach in information security

Threat of information security has impact to business of organization. Therefore, the development of information security risk model should consider business perspective. In order to develop new risk model, defining metrics is important process. It can be conducted by theoretical analysis, validity analysis and reliability analysis. Theoretical analysis and validity analysis had been performed in previous work. Furthermore, reliability analysis is performed in this paper. Cronbach's Alpha is required as method to measure reliability coefficient from five proposed metrics namely reputation, financial impact, critical level, business type of organization, and size of organization. Reliability analysis from proposed metrics results coefficient between 0.70-0.91. Based on previous researches, metric is reliable if it has coefficient greater than 0.65. Therefore, proposed metrics have adequate reliability to be used as metrics of risk model. © 2020 Elsevier B.V., All rights reserved.