Business oriented information security management: a layered approach

Authors:
Philipp Klempt;Hannes Schmidpeter;Sebastian Sowa;Lampros Tsinas
Affiliations:
Institute for E-Business Security, Ruhr-University of Bochum, Bochum, Germany;sd&m AG, Munich, Germany;Head of Management, Institute for E-Business Security, Ruhr-University of Bochum, Bochum, Germany;Program Manager Security, Munich, Germany
Venue:
OTM'07 Proceedings of the 2007 OTM confederated international conference on On the move to meaningful internet systems: CoopIS, DOA, ODBASE, GADA, and IS - Volume Part II
Year:
2007

Citing 7
Cited 0

Information Technology Standards: The Economic Dimension

Information Technology Standards: The Economic Dimension
The economics of information security investment

ACM Transactions on Information and System Security (TISSEC)
A model for evaluating IT security investments

Communications of the ACM - Has the Internet become indispensable?
Managing Cybersecurity Resources (The Mcgraw-Hill Homeland Security Series)

Managing Cybersecurity Resources (The Mcgraw-Hill Homeland Security Series)
Information Security Cost Management

Information Security Cost Management
Enterprise Security Architecture: A Business-Driven Approach

Enterprise Security Architecture: A Business-Driven Approach
SP 800-65. Integrating IT Security into the Capital Planning and Investment Control Process

SP 800-65. Integrating IT Security into the Capital Planning and Investment Control Process

Quantified Score

Hi-index	0.00

Visualization

Abstract

Information Security Management has become a top management priority due to a highly increasing economical dependency on information and its underlying information and communication technologies. While several efforts have been undertaken to set up physical, technical and organizational concepts to secure the information infrastructure, economic aspects have been widely neglected despite of an increasing management interest. This paper presents a layered model for managing information security with a strong economic focus by introducing a comprehensive concept which specifically links business and information security goals.