The comparison of information security standards by using analytic hierarchy process

Information security has gained a great importance in today's world. Information security and information security standards have taken its place among popular research areas. The purpose of this study is to select the best information security standards by using Analytic Hierarchy Process technique. The problem is modeled by multi-criteria decision making. Multi-criteria decision making is a method that is used for complex problems. In this study, first of all, information security standards are selected according to their worldwide popularity and explained in detail to give an idea. Then, common criteria of the standards are determined. Finally, the alternatives are evaluated with the help of Expert Choice Package regarding determined criteria. As a result of this study, it is seen that even though COBIT has superiority compare with ISO 27001 and ITIL based on specific criteria, when comparing ISO 27000 series with COBIT and ITIL, this time ISO 27000 series has gained superiority over COBIT and ITIL. None of these standards can promise hundred percent success in providing information security when applied singly. Therefore, a road map has been prepared to increase the effectiveness of information security system by combining these standards. Key Words: MCDM, AHP, Information Security, COBIT, ITIL, ISO/IEC 27001.