Year: 2023
Type: dissertation
Abstract: This research paper presents a comprehensive framework for achieving ISO 27001:2022 compliance and enhancing information security practices. The analysis begins with an exploration of the ISO 27001:2022 standard and its vital role in modern cybersecurity. It details a dynamic web-based framework, developed using React JS, that catalogues and explains all 93 controls specified by the standard. The framework aids organizations in conducting gap analyses and evaluating adherence to controls. The research emphasizes the synergy of automated analysis through the framework and human assessment of internal policies. By manually assessing confidential documents, organizations gain a nuanced perspective on their security measures. The paper advocates for a holistic approach to addressing gaps, incorporating industry best practices. By bridging these gaps and implementing missing controls, organizations bolster their information security posture and proactively mitigate cyber threats. In essence, this research guides organizations in navigating complex information security landscapes while safeguarding critical assets.
Source: NORMA
Author: Shetty, Abhishek Dinesh
Institution: National College of Ireland
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7018922313