Development of methods for identifying an appropriate benchmarking peer to establish information security policy

•Identifying benchmarking peer for establishing an information security policy.•Feature engineering based on Vague Soft Set.•Improvements of Gaussian process classification by integrating Vague Soft Set.•Combined use of Gaussian process and Vague Soft Set performs best among classifiers.