A Security Framework for Audit and Manage Information System Security

Author

Pereira, Teresa Susana Mendes ; Santos, Henrique

Author_Institution

Inf. Dept., Polytech. Inst. of Viana do Castelo, Valença, Portugal

Volume

3

fYear

2010

fDate

Aug. 31 2010-Sept. 3 2010

Firstpage

29

Lastpage

32

Abstract

Auditing Information Systems Security is difficult and becomes crucial to ensure the daily operational activities of organizations as well as to promote competition and to create new business opportunities. A conceptual security framework to manage and audit Information System Security is proposed and discussed. The proposed framework is based on a conceptual model approach, based on the ISO/IEC_JCT1 standards, to assist organizations to better manage their In-formation Systems Security.

Keywords

information systems; security of data; ISO/IEC_JCT1 standards; auditing; business opportunities; conceptual model; conceptual security framework; information system security; ISO standards; Information security; Ontologies; Organizations; Standards organizations; Security audit management; information system security; ontology and conceptual model;

fLanguage

English

Publisher

ieee

Conference_Titel

Web Intelligence and Intelligent Agent Technology (WI-IAT), 2010 IEEE/WIC/ACM International Conference on

Conference_Location

Toronto, ON

Print_ISBN

978-1-4244-8482-9

Electronic_ISBN

978-0-7695-4191-4

Type

conf

DOI

10.1109/WI-IAT.2010.244

Filename

5615546