%0 Journal Article %T GENETIC ALGORITHM APPROACH FOR RISK REDUCTION OF INFORMATION SECURITY %A Alireza Tamjidyamcholo %A Rawaa Dawoud Al-Dabbagh %J International Journal of Cyber-Security and Digital Forensics %D 2012 %I Society of Digital Information and Wireless Communications (SDIWC) %X Nowadays, information systems constitute a crucial part of organizations; by losing security, these organizations will lose plenty of competitive advantages as well. The core point of information security (InfoSecu) is risk management. There are a great deal of research works and standards in security risk management (ISRM) including NIST 800-30 and ISO/IEC 27005. However, only few works of research focus on InfoSecu risk reduction, while the standards explain general principles and guidelines. They do not provide any implementation details regarding ISRM; as such reducing the InfoSecu risks in uncertain environments is painstaking. Thus, this paper applied a genetic algorithm (GA) for InfoSecu risk reduction in uncertainty. Finally, the effectiveness of the applied method was verified through an example. %U http://sdiwc.net/digital-library/web-admin/upload-pdf/00000285.pdf