Evaluating the conformity of an access control architecture for Virtual Organizations with ISO/IEC 17799

Internet and information and communication technologies (ICTs) have contributed to the emergence of a new type of collaboration networks which is virtual organizations (VOs). VOs allow organizations to share and exchange resources and competencies for economical or educational purposes. Within VOs, each organization must open its information system; thus security concerns are raised to setup collaboration means. An information security policy is defined on the VO level. It must be consistent and be part of the global ISMS modelled and implemented according to the directives of international security standards. In this paper, we evaluate a proposal access control architecture for VOs using our maturity level tool based on the ISO/IEC 17799 international security standard.