scholarly journals Ontology-Based Evaluation of ISO 27001

2010 ◽  
pp. 93-102 ◽  
Author(s):  
Danijel Milicevic ◽  
Matthias Goeken
Keyword(s):  
Iso 27001

Neue Gesetze gleich neues Know-how? - Der Weg durch den Verordnungsdschungel

2017 ◽  
Vol 22 (12) ◽  
pp. 62-62
Keyword(s):  
Know How ◽  
Iso 27001

Bundesdatenschutzgesetz (BDSG), IT-Sicherheitsgesetz, ISO 27001:2015, Europäische Datenschutz-Grundverordnung (EU-DSGVO), Kirchlicher Datenschutz (KDO), Orientierungshilfe Krankenhaus-Informationssystem (OH-KIS) – ein kurzer Auszug aus den aktuellen Gesetzen, Regelungen und Verordnungen zeigt, wie komplex die Themen Datenschutz und Datensicherheit für die Verantwortlichen in deutschen Gesundheitseinrichtungen sind. Ergänzt wird das noch durch Empfehlungen verschiedener Verbände und Gremien.

Research on the Impact of Information Security Certification and Concealment onFinancial Performance

2022 ◽  
Vol 30 (3) ◽  
pp. 0-0
Keyword(s):  
Information Security ◽  
Financial Performance ◽  
Positive Impact ◽  
Rapid Development ◽  
International Standards ◽  
Corporate Decisions ◽  
Using Data ◽  
The Impact ◽  
The Relationship ◽  
Iso 27001

With the rapid development of information technology, information security has been gaining attention. The International Organization for Standardization (ISO) has issued international standards and technical reports related to information security, which are gradually being adopted by enterprises. This study analyzes the relationship between information security certification (ISO 27001) and corporate financial performance using data from Chinese publicly listed companies. The study focusses on the impact of corporate decisions such as whether to obtain certification, how long to hold certification, and whether to publicize information regarding certification. The results show that there is a positive correlation between ISO 27001 and financial performance. Moreover, the positive impact of ISO 27001 on financial performance gradually increases with time. In addition, choosing not to publicize ISO 27001 certification can negatively affect enterprise performance.

scholarly journals PENDETEKSIAN DINI TINGKAT KEMANAN INFORMASI BERBASIS ISO 27001 : 2013 MENGGUNAKAN METODE AHP (ANALYTICAL HIERARCHY PROCESS)

2019 ◽  
Vol 2 (2) ◽  
pp. 57-64
Author(s):  
Arini Arini
Keyword(s):  
Decision Making ◽  
Information Security ◽  
Analytical Hierarchy Process ◽  
British Standard Institution ◽  
International Electrotechnical Commission ◽  
Security Assessment ◽  
Scoring Method ◽  
Weighting Method ◽  
Hierarchy Process ◽  
Iso 27001

Information is one of the important assets for the survival of an organization / business, defense security and the integrity of the country, public trust between consumers, so that the availability, accuracy and integrity must be maintained, or commonly abbreviated as CIA (Confidentiality, Integrity & Availability). ISO 27001 is an information security standard published in October 2005 by the International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC). However, until now there has been no tool for companies in Indonesia to do a pre-assessment of the level of information security. Plus the lack of socialization of the rules and the lack of ISO 270001 expert in Indonesia, these are reason why the authors conducted this research. The author begins research by collecting data, by studying literature and interviewing experts to identify problems. After that, in its implementation, this research will be directed (knowledge acquisition) and reviewed directly by an ISO 27001 expert from The British Standard Institution of the United Kingdom (BSI) so that the results are more accurate. After that, the writer determines the weighting method (decision making), scoring method, system development method, and simulation method (testing). The results of the study are in the form of pre-assessment to evaluate the information security assessment index, which will be displayed according to indicators pioneered from ISO 27001: 2013 using AHP (Analytical Hierarchy Process) decision-making methods, as well as web-based making it easier to review.

scholarly journals EVALUASI KEAMANAN INFORMASI MENGGUNAKAN INDEKS KEAMANAN INFORMASI (KAMI) PADA KANTOR WILAYAH KEMENTERIAN HUKUM DAN HAM DIY

2020 ◽  
Vol 3 (1) ◽  
pp. 1-6
Author(s):  
TAUFIQ EFFENDY WIJATMOKO
Keyword(s):  
Corporate Governance ◽  
Good Corporate Governance ◽  
Iso 27001

Kantor Wilayah Kementerian Hukum dan HAM DIY merupakan instansi vertikal Kementerian Hukum dan HAM Republik Indonesia yang berkedudukan di provinsi yang melaksanakan tugas dan fungsi dalam hal layanan Hukum dan HAM, Kemigrasian, Pemasyarakatan dan Administrasi. Dalam pelaksanaannya dibantu dengan Teknologi Informasi dalam bingkai e-government berdasarkan suatu tata kelola pemerintahan yang baik (Good Corporate Governance). Pengelolaan informasi merupakan salah satu aspek dalam Good Corporate Governance, termasuk kualitas dan keamanan pengelolaan informasi. Penggunaan Indeks KAMI untuk mengukur tingkat kematangan dan kelengkapan dalam keamanan informasi dan diikuti dengan penerapan ISO 27001 sebagai standar keamanan internasional yang dapat membantu sebuah organisasi memastikan bahwa keamanan informasi yang diterapkan sudah efektif. Hasil dari penggunaan Indeks KAMI versi 4.1 di Kantor Wilayah Kementerian Hukum dan HAM DIY ini adalah tingkat ketergantungan penggunaan sistem elektronik sebesar 32 dari total skor 50 dan masuk kedalam kategori Tinggi dimana sistem elektronik adalah bagian yang tidak terpisahkan dari proses kerja yang berjalan. Hasil penilaian kelima area yang telah dilakukan adalah sebesar 314 dari 645 dan berada pada kategori pemenuhan kerangka kerja dasar. Rekomendasi dari penelitian ini dapat dijadikan sebagai bahan pertimbangan dan evaluasi bagi instansi dalam melakukan perbaikan yang berkaitan dengan mitigasi atau pencegahan kerentanan keamanan informasi, serta memastikan regulasi dapat dicapai dengan baik dan kebijakan keamanan institusi di masa yang akan datang.

scholarly journals Ecu@Risk, Una metodología para la gestión de Riesgos aplicada a las MPYMEs

Enfoque UTE ◽  
2017 ◽  
Vol 8 (1) ◽  
pp. 107-121 ◽  
Author(s):  
Esteban Crespo Martínez
Keyword(s):  
Risk Analysis ◽  
Management Method ◽  
Iso 27001 ◽  
Risk Analysis And Management

La información es el elemento más valioso para cualquier organización o persona en este nuevo siglo, la cual, para muchas de ellas, es un instrumento para crear ventaja competitiva (Vásquez & Gabalán, 2015). Sin embargo, pese a la falta de conocimiento sobre cómo protegerla adecuadamente, o a la complejidad de las normas internacionales que indican los procedimientos para lograr un adecuado nivel de protección, muchas organizaciones, en especial el sector MPYME, no logra alcanzar este objetivo.Por lo tanto, este estudio propone una metodología de seguridad de la información para la gestión del riesgo informático aplicable al entorno empresarial y organizacional del sector MPYME ecuatoriano. Para el efecto, se analizan comparativamente varias metodologías de amplia divulgación, como: Magerit, CRAMM (CCTA Risk Analysis and Management Method), OCTAVE-S, Microsoft Risk Guide, COBIT 5 y COSO III. Estas metodologías son internacionalmente utilizadas en la gestión del riesgo de información; a la luz de los marcos de referencia de la industria: ISO 27001, 27002, 27005 y 31000.

Adoption of ISO 27001 in Cyprus Enterprises

2015 ◽  
pp. 994-1017
Author(s):  
Ioanna Dionysiou ◽  
Angelika Kokkinaki ◽  
Skevi Magirou ◽  
Theodosios Iacovou
Keyword(s):  
Information Technology ◽  
Public Sector ◽  
Security Policies ◽  
Security Technologies ◽  
Policies And Procedures ◽  
Security Practices ◽  
It Resources ◽  
Research Findings ◽  
Iso 27001 ◽  
Research Analysis

This chapter presents the findings of an investigation on current security practices in Cypriot organizations, including enterprises and public sector divisions. In order to gain knowledge on the deployed security technologies by organizations, a survey was conducted and concluded in late 2010. The survey primarily examined compliance of enterprise current security policies and procedures with ISO 27001 security guidelines. A research analysis has been performed and identified that security mechanisms and the management of information technology (IT) resources may be improved on a number of aspects. Based on the research findings, an assessment of the viability of ISO 27001 in Cyprus is given as well as recommendations on the further deployment of ISO 27001.

Sign in / Sign up

Export Citation Format

Share Document