Iso security standards as a leverage on it security management

Association for Information Systems - 13th Americas Conference on Information Systems, AMCIS 2007: Reaching New Heights

Volumn 1, Issue , 2007, Pages 437-448

  Tashi, Igli ^a   Ghernaouti Hélie, Solange ^a  

^a UNIVERSITY OF LAUSANNE   (Switzerland)

Author keywords

Compliance and conformity; Information security management; Information security management complexity; Information security management effectiveness efficiency; ISO 27001 and ISO 17799 standards impact on it security management; Quality management; Risk management

Indexed keywords

COMPLIANCE AND CONFORMITY; INFORMATION SECURITY AREA; INFORMATION SECURITY MANAGEMENTS; INTERNATIONAL STANDARDS; ISO17799; IT SECURITY; MANAGEMENT FRAMEWORKS; OPERATIONAL ENVIRONMENTS; PROCESS NEEDS; SECURITY FRAMEWORKS; SECURITY MANAGEMENT; SECURITY STANDARDS;

INDUSTRIAL MANAGEMENT; INFORMATION SYSTEMS; MANAGERS; QUALITY MANAGEMENT; REGULATORY COMPLIANCE; RISK MANAGEMENT; SECURITY SYSTEMS; STANDARDS;

SECURITY OF DATA;

EID: 84870203687     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (20)

1. Blakley, B., & McDermott, E., & Geer, D. (2001). Proceedings from New security paradigm workshop: Information security is Information Risk Management. Cloudcroft, New Mexico: ACM Press
2. Calder, A. (2005). The case for ISO 27001. UK: IT Governance Publishing.
3. Carralli, R.A., & Wilson, W.R. (2004) The challenges of Security Management », software engineering institute. Retrieved February 15, 2006 from http://www.cert.org/archive/pdf/ESMchallenges.pdf
4. Club de la Sécurité de l'Information Français. (2003). ISO 17799:2000: une présentation générale. Retrieved February 15, 2007 from http://www.clusif.fr
5. Club de la Sécurité de l'Information Français. (2006). Politiques de sécurité des systèmes d'information et sinistralité en France. Retrieved February 15, 2007 from http://www.clusif.fr
6. Cohen, F. (2006). IT security governance Guidebook with security program metrics. US: Auerbach Publications
7. Computer Security Institute & Federal Bureau of Investigation. (2006). Computer crime and security survey 2006. Retrieved February 10, 2007 from http://www.gocsi.com
8. Ghernaouti, S. (2006). Sécurité informatique et réseaux: cours et exercices corrigés, France: Dunod
9. Herrman K., & Mühl G., & Geihs K. (2005). Self management: The solution to complexity or just another problem?. IEEE distributed systems online, 1541-4922. Retrieved January 20, 2007, from http://csdl2.computer.org/comp/mags/ds/2005/01/o1001.pdf
10. Hutt A., & Bosworth S., & Hoyt D. (1995, 3d edition). Computer Security Handbook. US: John Wiley & Sons, Inc.
11. International Standards Organization. (2005). ISO/IEC 17799:2005, Code de bonne pratique pour la gestion de la sécurité de l'information. Retrieved May 05, 2006 from http://www.iso.org
12. International Standards Organization. (2005). ISO/IEC 27001, Information security management system-Requirements. http://www.iso.org
13. Jones A., & Ashenden D. (2005). Risk management for computer security. UK: Elsevier.
14. Kajava J., & Savola R. (2005). Towards Better Information Security Management by understanding Security Metrics and Measuring Processes. University of OULU Finland, cahier n°02 - 2001. Retrieved January 20, 2007, from http://www.mc.manchester.ac.uk/eunis2005/medialibrary/papers/paper_154.pdf
15. Landoll D.J. (2006). The security risk assessment handbook. US: Auerbach Publications
16. National Institute of Standardization and technology. (2002). Risk management Guide for Information Technology Systems. Retrieved February 15, 2007 from http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf
17. Nelson A. (2007). ISO 27001 as a Support to Digital Forensics. Journal of Digital Forensic Practice, 1:1 43-46. Retrieved Avril 25, 2007, from http://taylorandfrancis.metapress.com/index/Q17W1X8PK26M1474.pdf
18. Secretariat of ISO/TC. (2004). ISO 9000 Introduction and support package: Guidance on the Concept and Use of the Process Approach for management systems. Retrieved February 15, 2007 from www.iso.org/tc176/sc2
19. Su, X., & Bolzoni, D., & van Eck, P.A.T. (2006) A Business Goal Driven Approach for Understanding and Specifying Information Security Requirements. Technical Report TR-CTIT-06-08 Centre for Telematics and Information Technology, University of Twente.
20. Whitman M. E., & Mattord H. (2007). Management of Information Security. US: Course Technology