• DocumentCode
    2809468
  • Title

    Appraisal of the Effectiveness and Efficiency of an Information Security Management System Based on ISO 27001

  • Author

    Boehmer, Wolfgang

  • Author_Institution
    Dep. of Comput. Sci., Tech. Univ. Darmstadt, Darmstadt
  • fYear
    2008
  • fDate
    25-31 Aug. 2008
  • Firstpage
    224
  • Lastpage
    231
  • Abstract
    The ISO27001:2005, as an information security management system (ISMS), is establishing itself more and more as the security standard in enterprises. In 2008 more than 4457 certified enterprises could be registered worldwide. Nevertheless, the registering an ISMS still says nothing about the quality and performance of its implementation. Therefore, in this article, a method for measuring the performance of the implementation and operation of an ISMS is presented.
  • Keywords
    ISO standards; security of data; ISMS; ISO 27001; ISO27001:2005; information security management system; Appraisal; Computer science; Computer security; Conference management; Documentation; ISO standards; Information management; Information security; Risk management; Technology management; ISMS; ISO 27001; effectiveness; efficiency; strategic dilemma;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Emerging Security Information, Systems and Technologies, 2008. SECURWARE '08. Second International Conference on
  • Conference_Location
    Cap Esterel
  • Print_ISBN
    978-0-7695-3329-2
  • Electronic_ISBN
    978-0-7695-3329-2
  • Type

    conf

  • DOI
    10.1109/SECURWARE.2008.7
  • Filename
    4622587