Information security management: An approach to combine process certification and product evaluation

Computers and Security

Volumn 19, Issue 8, 2000, Pages 698-709

  Eloff, M M ^a   Von Solms, S H ^a  

^a UNIVERSITY OF JOHANNESBURG   (South Africa)

Author keywords

[No Author keywords available]

Indexed keywords

BENCHMARKING; ELECTRONIC COMMERCE; MANAGEMENT INFORMATION SYSTEMS; PROCESS CONTROL; QUALITY CONTROL; RESOURCE ALLOCATION;

PROCESS CERTIFICATION; PRODUCT EVALUATIONS;

SECURITY OF DATA;

EID: 0034516080     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0167-4048(00)08019-6     Document Type: Note

References (14)

1. [BS77 95] BS7799 Code of Practice for Information Security Management, ESI 1995.
2. [BS77 98] Information Security Management, Part 2. Specification for Information Security Management Systems, BSI 1998.
3. [BS77 99] BS7799 Code of Practice for Information Security Management, BSI 1999.
4. [BUZZ 99] Computer Security -What should you spend your money on? Keith Buzzard, Computers & Security,Vol 18 No 4, pp. 322-334.
5. [C:CUR 99] Welcome to the Website for BS 7799 and c:cure, http://www.c-cure.org/bsframes.htm. Copyright BSI-DISC ©1998, 1999, 12 Nov 1999.
6. [CCIN 99] Common Criteria: An Introduction, 1999, Syntegra, CESG (UK), NIST (USA).
7. [CCPP 00] Common Criteria Protection Profile Listing by Type, Os Jan 2000.
8. [CCUG 99] Common Criteria for Information Technology Security Evaluation User Guide, October 1999, Syntegra, CESG (UK), NIST (USA).
9. [CSE 99] Computer Security Evaluation FAQ, Version 2.1. Http://wwwfaqs.org/faqs/computer-security/evaluations/ 6 Jan 2000.
10. [HIST 99] Historical Evaluated Product List http://wwwradium.ncsc.mil/tpep/epl/histoncal.html Jan 2000.
11. [ITSE 99] ITSEC Frequently Asked Questions http:// wwwitsec.gov.uk Jan 2000.
12. [LEMI 96] The evaluation of secure information systems. Jacques R Lamieux, May 1996, LSE Computer Security Research Centre.
13. [NGI 95] Evaluatie Kritena voor IT-beveihging, Nederlands Cenootschap voor Informatica Afdeling Beveiliging, Edited by Dr Ir PL Overbeek, Kluwer Bedryfslnformatie, 1995.
14. [SINH 99] ORACLE Composite Evaluations: A Perspective, 15 Annual Computer Security Applications Conference, Dec 1999.