Year: 2007
Type: article
Abstract: Information security is a very important component in the context of an organization's dependence on ICT.The operational environment where these technologies are operating is a very complex one.Offering a good level of protection by information security process needs a well defined managerial framework.This paper discusses the reasons why having a well defined managerial security framework is needed in an information security area, as well as which are the tools to build and implement such a management framework.After a short presentation, two international standards related to Information Security Management, the ISO 17799:2005 and ISO 27001 standards, and the implications of being conforming to these standards are analysed and their advantages and limits in a security management framework are pointed out.
Authors: Igli Tashi, Solange Ghernaouti-Hallie
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W1573253764