A STOPE model for the investigation of compliance with ISO 17799-2005

Information Management and Computer Security

Volumn 15, Issue 4, 2007, Pages 283-294

  Saleh, Mohamed Saad ^a   Alrabiah, Abdullah ^b   Bakry, Saad Haj ^b  

^a UNIVERSITY OF BRADFORD   (United Kingdom)

^b KING SAUD UNIVERSITY   (Saudi Arabia)

Author keywords

Data security; International standards

Indexed keywords

EXTRANETS; INTERNET; MATHEMATICAL MODELS; REGULATORY COMPLIANCE; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS; STANDARDS;

INFORMATION SECURITY MANAGEMENT; INTERNATIONAL STANDARDS;

INFORMATION MANAGEMENT;

EID: 34547902455     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685220710817806     Document Type: Article

References (12)

1. Bakry, S.H. (2003a), "Toward the development of a standard e-readiness assessment policy", International Journal of Network Management, Vol. 13 No. 2, pp. 129-37.
2. Bakry, S.H. (2003b), "Development of security policies for private networks", International Journal of Network Management, Vol. 13 No. 3, pp. 203-10.
3. Bakry, S.H. (2004), "Development of e-government: A STOPE view", International Journal of Network Management, Vol. 14 No. 5, pp. 339-50.
4. Bakry, S.H. and Bakry, F.H. (2001), "A strategic view for the development of e-business", International Journal of Network Management, Vol. 11 No. 2, pp. 103-12.
5. Eloff, J.H. and Eloff, M.M. (2003), "Information security management - a new paradigm", Proceedings of SAICST, pp. 130-6.
6. Fung, A.R., Farn, K. and Lin, A. (2003), "A study on the certification of the information security management systems", Computer Standards & Interfaces, Vol. 25, pp. 447-61.
7. ISO (2006), The website of the International Organization of Standardization, available at: www.iso.org (accessed March 2006).
8. ISO/IEC 17799-2005 (E) (2005), Information Technology-Security Techniques-Code of Practice for Information Security Management, International Standards Organization, Geneva.
9. ISO/IEC 27001 (2005), Information Technology-Security Techniques-Information Security Management Systems-Requirements, International Standards Organization, Geneva.
10. Saleh, M.S., Alrabiah, A. and Bakry, S.H. (2007), "Using ISO 17799-2005 security management standard: A STOPE view with six sigma approach", International Journal of Network Management, Vol. 17 No. 1, pp. 85-97.
11. von Solms, R. (1999), "Information security management: Why standards are important", Information Management & Computer Security, Vol. 7 No. 1, pp. 50-7.
12. von Solms, B. and von Solms, R. (2001), "Incremental information security certification", Computers & Security, Vol. 20 No. 4, pp. 308-10.