Strengthening information technology security through the failure modes and effects analysis approach

Table 5 Action plan recommended by C-FMEA project

IS component	Failure causes	CRPN	Person responsible
Processes	Antivirus update	90	Internal users
			IT professionals
			Network administrators
	Firewall	84	IT professionals
	Firewall	84	Network administrators
	Performance and tuning	70	IT professionals
			Database administrators
			Network administrators
	Password protection	84	Internal users
	Password protection	84	Network administrators
Policies and procedures	Access control list	80	Database administrators
	Access control list	80	Network administrators
	Internet use policy	84	Internal users
			IT professionals
			Network administrators
Human factors	Internal users	72	IT professionals
			Database administrators
			Network administrators
			Airport security
	IT professionals	40	IT professionals
			Database administrators
			Network administrators
Equipment	CCTV	36	Network administrators
	CCTV	36	Airport security
	Biometric	96	Network administrators
	Biometric	96	Airport security
	Electronic ID cards	24	Network administrators
	Electronic ID cards	24	Airport security
Physical location	Terminal	9	IT professionals
	Terminal	9	Airport security
	Aircraft	9	IT professionals
	Aircraft	9	Airport security
	Internal operations	84	Internal users
			IT professionals
			Network administrators
			Airport security
Network component	Wireless access	96	Network administrator
	Hardware	32	IT professionals
	Hardware	32	Network administrators
	Software	12	IT professionals
	Software	12	Network administrators
	Data	72	Database administrators
	Data	72	Network administrators