Information Security Best Practices

2013 ◽  
pp. 119-144 ◽  
Author(s):  
Keith Mayes ◽  
Konstantinos Markantonakis
Keyword(s):  
Information Security ◽  
Best Practices

scholarly journals USE OF ONTOLOGIES IN MAPPING OF INFORMATION SECURITY REQUIREMENTS / ONTOLOGIJOS NAUDOJIMAS INFORMACIJOS SAUGUMO REIKALAVIMAMS SUSIET

2013 ◽  
Vol 5 (2) ◽  
pp. 88-91
Author(s):  
Simona Ramanauskaitė ◽  
Eglė Radvilė ◽  
Dmitrij Olifer
Keyword(s):  
Information Security ◽  
Best Practices ◽  
Security Requirements ◽  
Security Standards

A large amount of different security documents, standards, guidelines and best practices requires to ensure mapping between different security requirements. As the result of mapping, security requirements of different standards can coincide or require to be amended or harmonised. This is the reason why it is so difficult to map more than two different security documents. Ontologies can be used to solve this issue. The article offers a review of different security documents and ontology types as well as investigates possible use of ontologies for mapping of security standards. Article in Lithuanian Santrauka Esant daugybei informacijos saugą reglamentuojančių dokumentų, gairių ir standartų, aktualu tarpusavyje susieti juose apibrėžtus saugumo reikalavimus. Skirtinguose saugos dokumentuose aprašyti saugumo reikalavimai gali ne tik sutapti arba papildyti vienas kitą, bet ir prieštarauti vienas kitam. Tai labai apsunkina daugiau negu dviejų informacijos saugą reglamentuojančių dokumentų susiejimą. Vienas būdų susieti daugiau negu du saugą reglamentuojančius dokumentus galėtų būti ontologijos naudojimas. Straipsnyje apžvelgiami šiuo metu pagrindiniai saugą reglamentuojantys standartai, egzistuojančios saugumo ontologijos, išnagrinėta galimybė naudoti ontologiją saugą reglamentuojančių dokumentų reikalavimams susieti ir galimybę tokį susiejimą atvaizduoti grafais.

An Integrative Framework for the Study of Information Security Management Research

2009 ◽  
pp. 55-67
Author(s):  
John D’Arcy ◽  
Anat Hovav
Keyword(s):  
Information Security ◽  
Best Practices ◽  
Security Management ◽  
Comprehensive Approach ◽  
Information Security Management ◽  
Future Studies ◽  
Integrative Framework ◽  
Current State ◽  
Industry Standards ◽  
Multiple Dimensions

A number of academic studies that focus on various aspects of information security management (ISM) have emerged in recent years. This body of work ranges from the technical, economic, and behavioral aspects of ISM to the effect of industry standards, regulations, and best practices. The purpose of this chapter is to review the current state of ISM research, while providing an integrative framework for future studies. Using the proposed framework as a guide, we identify areas of depth within current ISM literature and areas where research is underdeveloped. Finally, we call for a more comprehensive approach to ISM research that considers multiple dimensions of our framework and their interrelationships.

Information Security Policy Framework: Best Practices for Security Policy in the E-commerce Age

2001 ◽  
Vol 10 (2) ◽  
pp. 1-15 ◽  
Author(s):  
Malcolm E. Palmer ◽  
Craig Robinson ◽  
Jody C. Patilla ◽  
Edward P. Moser
Keyword(s):  
Information Security ◽  
Best Practices ◽  
Security Policy ◽  
Policy Framework ◽  
Information Security Policy

An Information Governance Model for Information Security Management

2012 ◽  
pp. 155-189 ◽  
Author(s):  
Matthew Nicho
Keyword(s):  
Information Systems ◽  
Information Security ◽  
Best Practices ◽  
Service Management ◽  
Security Management ◽  
Technology Infrastructure ◽  
Information Security Management ◽  
Pci Dss ◽  
Governance Model ◽  
Information Governance

The purpose of this paper is to propose an IS security governance model to enhance the security of information systems in an organisation by viewing security from a holistic perspective of encompassing information security, information assurance, audit, governance, and compliance. This is achieved through the strategic integration of appropriate frameworks, models, and concepts in information governance, IS service management, and information security. This involves analysing the relevant frameworks, models, and concepts used in the above domains, extracting the best practices for implementing them from the literature and mapping these into an integrated standard. The frameworks identified are Control Objectives for Information and related Technology (COBIT), Information Technology Infrastructure Library (ITIL), ISO 27002, Risk IT, and Payment Card Industry Data Security Standard (PCI DSS). While it is evident that each of these five frameworks serve different purpose of information systems, such as information auditing and governance, facilitating the delivery of high-quality IT services, providing a model managing an Information Security Management System, providing a risk focus, and protection of cardholder data, all of these frameworks have the common objective to secure the IS assets in an organisation. Hence, extraction of the best practices in each of these framework can provide effective security of organisational IS assets rather than adequate security.

Sign in / Sign up

Export Citation Format

Share Document