Information system security is one of the most important challenges of today’s organisations. Although most organisations use security technologies, they have come to the conclusion that technology alone is not enough. In this study, we analysed and ranked the opinions of IT experts, managers, and Ph.D. students concerning the role of knowledge management in creating, recording, sharing, and applying information security knowledge. First, we identified 62 knowledge management techniques and tools. Then, 20 techniques and tools were investigated in knowledge management cycle using fuzzy screening through interviews and questionnaires. Finally, the network analysis methods, DEMATEL, and VIKOR were employed for weighting, internal relationships, and ranking each of the tools in the evaluation cycle. According to the results, “ Knowledge Base” was the most important factor in creating and recording knowledge. In sharing and diffusing knowledge, “ Categorisation of Knowledge ”scored the top, while “Knowledge Maps” were the most important tool in knowledge application.

Keywords