Multidimensional Management of Information Security – A Metrics Based Approach Merging Business and Information Security Topics

Currently as even more in the future, enterprises of whatever size and structure highly dependent on information and information processing technologies. A lot effort has been made for securing these assets, focusing on technical and selected organizational solutions mainly. As the rising dependability on information security comes along with an even stronger increase in the necessity to manage information security also by using a business pair of glasses, activities like communication to security stakeholders or to justify resources needed substantiate the development of models and methods to support information security management entities. A multidimensional approach able to cope with these challenges by integrating business and security topics is presented in the current paper.