Information Security Risk Assessment and Mitigation Prioritization at the Naval Base Data Center Using the OCTAVE Allegro Framework Combined with the Delphi Method

The purpose of this study is to analyze potential risks that may threaten the security of the Naval Base Data Center, a facility crucial to supporting naval operational tasks. Risk assessment was conducted using the OCTAVE Allegro framework integrated with the Delphi method, and mitigation steps were formulated in accordance with ISO/IEC 27002:2022 to ensure effective risk management. Fifteen information‐security experts participated via the Delphi process to identify fourteen principal risk factors affecting data confidentiality, integrity, and availability. The analysis revealed that the greatest risks stem from cyber threats—particularly ransomware attacks—and unauthorized administrative access. Based on the risk evaluation, recommended mitigations include strengthening security controls, updating hardware and software infrastructure, and providing ongoing personnel training. It is anticipated that these findings will offer a more systematic guide for managing information‐security risks at naval data centers and will reinforce safeguards to support more secure operational continuity