Corporate Security Compliance in a Heterogeneous Environment

Author

Yip, Frederick ; Wong, Alfred Ka yiu ; Ray, Pradeep ; Paramesh, Nanda

Author_Institution

Sch. of Inf. Syst., Technol. & Manage., New South Wales Univ.

fYear

2006

fDate

3-7 April 2006

Firstpage

1

Lastpage

4

Abstract

Organizations often have to audit and assess their information system security as a corporate compliance process based on a range of standards. The growing number of security standards such as CobiT, ISO17799 and BSI raises the potential interoperability problem in a heterogeneous environment. Often different standards are needed to satisfy different regional regulatory and obligatory requirements. In this paper, we present an ontology based approach to deal with the interoperability problem

Keywords

BSI standards; ISO standards; commerce; open systems; security of data; BSI security standard; CobiT security standard; ISO17799 security standard; corporate compliance process; corporate security compliance; heterogeneous environment; information system security; interoperability problem; obligatory requirement; ontology based approach; regional regulatory requirement; Ontologies; Radiofrequency interference; Security; assessment; ontology; security compliance;

fLanguage

English

Publisher

ieee

Conference_Titel

Network Operations and Management Symposium, 2006. NOMS 2006. 10th IEEE/IFIP

Conference_Location

Vancouver, BC

ISSN

1542-1201

Print_ISBN

1-4244-0142-9

Type

conf

DOI

10.1109/NOMS.2006.1687637

Filename

1687637