Abstract—The need for a unified Information Technology (IT) risk management methodology is constantly growing due to the increased usage of IT in almost every possible situation. While being a relatively new topic, risk assessment lacks scientific background and unified system to measure the level of risk and compare it to the reference data. While this process requires expertise, results may vary depending on the chosen methodology and the personal experience of the evaluator. Creating a unified risk assessment model is now an initiative supported by governmental bodies worldwide. A risk assessment model for the IT assets that is to be implemented in an expert system is proposed in this paper as well as primary test results of this system are provided.

Index Terms—Risk assessment, expert systems, risk modelling.

The authors are with the Vilnius Gediminas Technical University, Dept. of Information Systems, Sauletekio al. 11, Vilnius, LT-10223, Lithuania (e-mail: justinas.janulevicius@vgtu.lt, antanas.cenys@vgtu.lt).

Cite:Justinas Janulevičius and Antanas Čenys, "Development of a Risk Assessment Model for IT Risk Self-Assessment Expert System for SMEs," International Journal of Computer and Communication Engineering vol. 3, no. 4, pp. 306-309, 2014.