• DocumentCode
    2104556
  • Title

    Introducing a framework for security measurements

  • Author

    Dogaheh, Morteza Ansari

  • Author_Institution
    Organ. for Educ. Res. & Planning, OERP, Tehran, Iran
  • fYear
    2010
  • fDate
    17-19 Dec. 2010
  • Firstpage
    638
  • Lastpage
    641
  • Abstract
    Nowadays it is obvious that a modern management would not be accessible unless it approaches to some effective indicators on the efficiency and the performance of the organization. The process to make the best decision is highly depended on the organization quality indicators. One of the requirements of the Chief Information Security Officer, CISO, is to specify a better security establishment of the organization strategy by using a security management dashboard. The exclusive characteristics of the security do not allow considering a static and a predefined criterion to represent quantitatively the security status of the organization. The quantitative representation of the security in an organization is related to fluid parameters that must be received and processed from various units as the input of a framework and be set as dashboard output. In this paper we introduce a new approach to measure the security of organization with a recommended framework. This would be an interface system named SM-Framework acts as a system management which yields in the figures of merit of an organization security. Finally we have given, numerically and graphically, the level of security in different times for an organization.
  • Keywords
    personnel; security of data; CISO; SM-framework; chief information security officer; interface system; security measurement; Delta modulation; Indexes; Information security; Measurement; Organizations; Standards organizations; indicators; measurement; security metrics;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Information Theory and Information Security (ICITIS), 2010 IEEE International Conference on
  • Conference_Location
    Beijing
  • Print_ISBN
    978-1-4244-6942-0
  • Type

    conf

  • DOI
    10.1109/ICITIS.2010.5689505
  • Filename
    5689505