On an Integration of an Information Security Management System into an Enterprise Architecture

This paper presents a new approach for the integration of an Information Security Management System (ISMS), defined by the international standard ISO/IEC 27001, into an Enterprise Architecture (EA). Such an approach establishes a basis for comprehensive ISMS that reflects the entire security needs of an enterprise organization. Starting from the ISO/IEC 27001 standard, the suitability of established enterprise architectures was evaluated in a first step. As result, the approach of Braun to Business Engineering was chosen. Starting from the strategic level, we show how an ISMS can be realized in Braun´s enterprise modeling scheme.