Information security management framework for small and medium enterprise

Kaušpadienė, Laima

doi:10.20334/2019-027-m

Cited by 4 publications

(1 citation statement)

References 96 publications

(64 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Results provided a foundation for devising solutions to the weaknesses in employees' compliance with information security practices and for inspiring information security practices consistently based on employee autonomy. Kaušpadienė et al (2019) the authors designed a practical and reliable model for assessing information security management framework quality and suitability for application in small and medium sized enterprises. However, it will not provide the type of flexibility that may be required for small and medium sized enterprises.…”

Section: Materials and Methods And Development Processmentioning

confidence: 99%

Integrated Information Security Policy Model for Saudi Arabia Organizations

Ghaban¹

2023

Journal of Computer Science

View full text Add to dashboard Cite

Information Security Policy (ISP) is an important domain used to preserve the confidentiality, integrity, and availability of sensitive data. However, it is an ambiguous and diverse domain due to the diversity of security policies and the multiplicity nature of organization systems. Numerous specific and generic ISP models have been offered for several purposes. The offered models have numerous redundant procedures, concepts, activities, processes, and tasks that make the ASP domain unorganized, unstructured, and ambiguous among domain experts and users. Thus, the structured and integrated model to simplify sharing, managing, and reusing ISP activities and tasks is still missing. This study applied the design science method to develop a unified model for the ISP domain called the Integrated Information Security Policy Model (IISPM). This aims to identify, recognize, extract, and match different ISP processes, concepts, activities, and tasks from different ISP models in a developed IISPM, thus, allowing domain experts and users to derive/instantiate solution models easily. The developed IISPM consists of six main abstract processes: Information security policy process, information security awareness process, access control process, observing the process, agreement process, and plan process. Each introduced process has specific security practices. The output showed that IISPM assists domain experts and users to create their solution models based on their requirements.

show abstract

Section: Materials and Methods And Development Processmentioning

confidence: 99%