Information Security Management System Implementation Success Factors: A Review

2016 ◽  
Vol 22 (10) ◽  
pp. 3023-3026 ◽  
Author(s):  
Nurazean Maarop ◽  
Kavitha Thamadharan ◽  
Ganthan Narayana Samy ◽  
Norziha Megat Mohd Zainuddin ◽  
Azri Azmi ◽  
...  
Keyword(s):  
Information Security ◽  
Management System ◽  
Success Factors ◽  
Security Management ◽  
System Implementation ◽  
Implementation Success ◽  
Information Security Management ◽  
Information Security Management System

A Qualitative Insight of Success Factors of Information Security Management System

2021 ◽  
Author(s):  
Nurazean Maarop ◽  
Mohd Farid Mohd Zam ◽  
Ganthan Narayana Samy ◽  
Azizah Abdul Manaf ◽  
Asmaa Munshi ◽  
...  
Keyword(s):  
Information Security ◽  
Management System ◽  
Success Factors ◽  
Security Management ◽  
Information Security Management ◽  
Information Security Management System

A pattern-based method for establishing a cloud-specific information security management system

2013 ◽  
Vol 18 (4) ◽  
pp. 343-395 ◽  
Author(s):  
Kristian Beckers ◽  
Isabelle Côté ◽  
Stephan Faßbender ◽  
Maritta Heisel ◽  
Stefan Hofbauer
Keyword(s):  
Information Security ◽  
Management System ◽  
Security Management ◽  
Specific Information ◽  
Information Security Management ◽  
Information Security Management System

scholarly journals Analisis Sistem Manajemen Keamanan Informasi Menggunakan ISO/IEC 27001 : 2013 Serta Rekomendasi Model Sistem Menggunakan Data Flow Diagram pada Direktorat Sistem Informasi Perguruan Tinggi

2016 ◽  
Vol 6 (1) ◽  
pp. 38
Author(s):  
Yuni Cintia Yuze ◽  
Yudi Priyadi ◽  
Candiwan .
Keyword(s):  
Information Security ◽  
Asset Management ◽  
Management System ◽  
Security Management ◽  
Maturity Level ◽  
Information Security Management ◽  
Capability Maturity ◽  
Information Security Management System ◽  
Level 3 ◽  
Iec 27001

The importance of information and the possible risk of disruption, therefore the universities need to designed and implemented of the information security.  One of the standards that can be used to analyze the level of information security in the organization is ISO/IEC 27001 : 2013 and this standard has been prepared to provide requirements for establishing, implementing, maintaining and continually improving an information security management system. The objective of this research is to measure the level of information security based on standard ISO/IEC 27001: 2013 and modeling systems for information security management. This research uses descriptive qualitative approach, data collection and validation techniques with tringulasi (interview, observation and documentation). Data was analyzed using gap analysis and to measure the level of maturity this research uses SSE-CMM (Systems Security Engineering Capability Maturity Model). Based on the research results, Maturity level clause Information Security Policy reaches level 1 (Performed-Informally), clause Asset Management reaches level 3 (Well-Defined), clause Access Control reaches level 3 (Well-Defined), clause Physical and Environmental Security reaches level 3 (Well-Defined), clause Operational Security reaches level 3 (Well-Defined), Communication Security clause reaches the level 2 (Planned and Tracked). Based on the results of maturity level discovery of some weakness in asset management in implementing the policy. Therefore, the modeling system using the flow map and CD / DFD focused on Asset Management System.

Sign in / Sign up

Export Citation Format

Share Document