Ana Paula Cabral Seixas Costa

A new method for elicitation of criteria weights in additive models: Flexible and interactive tradeoff

This paper proposes the Flexible and Interactive Tradeoff (FITradeoff) method, for eliciting scaling constants or weights of criteria. The FITradeoff uses partial information about decision maker (DM) preferences to determine the most preferred in a specified set of alternatives, according to an additive model in MAVT (Multi-Attribute Value Theory) scope. This method uses the concept of flexible elicitation for improving the applicability of the traditional tradeoff elicitation procedure. FITradeoff offers two main benefits: the information required from the DM is reduced and the DM does not have to make adjustments for the indifference between two consequences (trade-off), which is a critical issue on the traditional tradeoff procedure. It is easier for the DM to make comparisons of consequences (or outcomes) based on strict preference rather than on indifference. The method is built into a decision support system and applied to two cases on supplier selection, already published in the literature.

A multidimensional approach to information security risk management using FMEA and fuzzy theory

We proposed an approach to information security risk management, encompassing Failure Mode and Effects Analysis (FMEA) and fuzzy theory.This approach analyses five dimensions of information security.A numerical application was undertaken. Because of the evolution and widespread use of the Internet, organisations are becoming more susceptible to attacks on Information Technology Systems. These attacks result in data losses and alterations, and impact services and business operations. Therefore, to minimise these potential failures, this paper presents an approach to information security risk management, encompassing Failure Mode and Effects Analysis (FMEA) and fuzzy theory. This approach analyses five dimensions of information security: access to information and systems, communication security, infrastructure, security management and secure information systems development. To illustrate the proposed model, it was applied to a University Research Group project. The results show that the most important aspects of information security risk are communication security, followed by infrastructure.

Modelo de decisão multicritério para priorização de sistemas de informação com base no método PROMETHEE

Este artigo apresenta um modelo de decisao multicriterio para priorizacao de sistemas de informacao com base no metodo PROMETHEE. O modelo apresenta uma ordenacao de modulos de sistemas de informacao a partir do estabelecimento de pesos e preferencias sobre criterios pelo decisor. A abordagem pode ser aplicada num estagio de planejamento ou de gestao da informacao. A modelagem de preferencia do decisor incorpora atributos como: impacto dos fatores estrategicos e aspectos operacionais dos processos de negocio. Uma aplicacao numerica ilustra o uso do modelo de decisao.

Information security risk analysis model using fuzzy decision theory

A risk analysis model for information security was proposed.The model is based on fuzzy decision theory.A taxonomy of events and scenarios using ETA methodology was developed.Alternatives can be ranked based on the criticality of the risk.The model provides information regarding the criticality causes of attacks.Results show that deliberate external database attack is the most risky alternative. This paper proposes a risk analysis model for information security assessment, which identifies and evaluates the sequence of events - referred to as alternatives - in a potential accident scenario following the occurrence of an initiating event corresponding to abuses of Information Technology systems. In order to perform this evaluation, this work suggests the use of Event Tree Analysis combined with fuzzy decision theory. The contributions of the present proposal are: the development of a taxonomy of events and scenarios, the ranking of alternatives based on the criticality of the risk, considering financial losses, and finally, the provision of information regarding the causes of information system attacks of highest managerial relevance for organizations. We included an illustrative example regarding a data center aiming to illustrate the applicability of the proposed model. To assess its robustness, we analyzed twelve alternatives considering two different methods of setting probabilities of the occurrence of events. Results showed that deliberate external database services attack represent the most risky alternative.

Using value-focused thinking in Brazil

Value-Focused Thinking (VFT) provides a systematic approach to structure complex decisions for subsequent analysis. It is a powerful complement to decision analysis and its application has been growing in recent years. This paper discusses the application of VFT in Brazil to three problems in different contexts: water management, information system/information technology (IS/IT) strategic planning, and the disposal of plaster waste. This article describes how the VFT approach was used to structure these decision problems and identify alternatives to stall them, which led to developing qualitative and quantitative models for evaluating the alternatives, and discusses how such structures can be used in other similar problems.

A flexible elicitation procedure for additive model scale constants

This paper contributes to the process of eliciting additive model scale constants in order to support choice problems, thereby reducing the effort a decision maker (DM) needs to make since partial information with regard to DM preferences can be used. Procedures related to eliciting weights without a tradeoff interpretation of weights are justified based on assumptions that DM is not able to specify fixed weight values or if DM is able to do so, this would not be reliable information. As long as partial information is provided, the flexible elicitation procedure performs dominance tests based on a linear programming problem to explore the DM’s preferences as a vector space which is built using the DM’s partial information. To provide evidence of the satisfactory performance of the flexible elicitation procedure, an empirical test is presented with results that indicate that this procedure requires less effort from DMs.

The Roles of Big Data in the Decision-Support Process: An Empirical Investigation

The decision-making process is marked by two kinds of elements: organizational and technical. The organizational elements are those related to companies’ day-to-day functioning, where decisions must be made and aligned with the companies’ strategy. The technical elements include the toolset used to aid the decision making process such as information systems, data repositories, formal modeling, and analysis of decisions. This work highlights a subset of the elements combined to define an integrated model of decision making using big data, business intelligence, decision support systems, and organizational learning all working together to provide the decision maker with a reliable visualization of the decision-related opportunities. The main objective of this work is to perform a theoretical analysis and discussion about these elements, thus providing an understanding of why and how they work together.

Negotiation model for group decision with ELECTRE TRI – the ELECTRE TRI-NG

Since its conception ELECTRE TRI has been widely used to deal with several problems in the problematic of sorting. However, the inherent limitation of this method lies in its working with only one decision-maker. Currently there is an ELECTRE TRI version that can be used with multiple decision-makers, but it lacks the tools to deal with non-cooperative situations. Thus, this paper puts forward a negotiation procedure to be applied when using ELECTRE TRI. The procedure was inspired by the last-diminisher procedure and a version of the Nash Demand Game, Divide-the-Dollar, in order to establish an envy-free Nash Equilibrium and to control greed. The method establishes a negotiation process between decision-makers, in order to define each player’s degree of participation in determining the values of the ELECTRE TRI criteria, weights and parameters. Each parameter is divided into negotiable shares that will be distributed by means of the negotiation procedure, which represents the degree of participation of the decision-maker’s preferences.

PORTFOLIO SELECTION OF INFORMATION SYSTEMS PROJECTS USING PROMETHEE V WITH C-OPTIMAL CONCEPT

This paper presents a multicriteria decision model for selecting a portfolio of information system (IS) projects, which integrates strategic and organizational view within a multicriteria decision structure. The PROMETHEE V method, based on outranking relations is applied, considering the c-optimal concept in order to overcome some scaling problems found in the classical PROMETHEE V approach. Then, a procedure is proposed in order to make a final analysis of the c-optimal portfolios found as a result of using PROMETHEE V. Also, the organizational view is discussed, including some factors that may influence decision making on IS projects to be included in the portfolio, such as adding the companys strategic vision and technical aspects that demonstrate how IS contributes value to a companys business.

IT Project Investments: An Analysis Based on a Sort and Rank Problem

This paper presents a multicriteria approach to the evaluation of information technology (IT) projects. In this paper, we present the steps of the model to evaluate IT project investments, including the identification of IT project investment, the construction of IT investment or IT project categories, the assessment of the importance of criteria and establishes final recommendations. The methodology proposes a framework, based on multicriteria analysis, that describes the importance of classifying and prioritizing IT projects investments before taking decisions. Decisions on IT investments should consider the different characteristics of each IT project and in each case evaluate the tangible and intangible benefits. However, measurements of intangible benefits are usually subjective and require a formal procedure to minimize the difficulty and consequence of this. Thus, the model enables us to handle this subjectiveness and it is exemplified with a numerical illustration, the data being drawn from a preview study.