Corresponding Security Level with the Risk Factors of Personally Identifiable Information through the Analytic Hierarchy Process

Abstract

Since Taiwan government has announced the New Version of Personal Information Protection Act , People began to pay attention to their personal information and privacy. Many industries significantly increased their responsibilities and faced more serious challenges. In order to cope with the requirements of the new law, BS10012 specification can help enterprises to reduce impact of personal data protection law. Enterprises need to rethink policy objectives, and make risk assessment of personally identifiable information (PII). This study using analytic hierarchy process (AHP) to identify the security level of PII. Corresponding security level with the risk factors of personal information, so that find the suitable countermeasure to protect users PII. Rarely see research about risk assessment of PII by using AHP, therefore the feasibility of the application of AHP in this regard is worthwhile to explore.