Idea: A reference platform for systematic information security management tool support

Ingo Müller, Jun Han, Jean Guy Schneider, Steven Versteeg

Research output: Chapter in Book/Report/Conference proceedingConference PaperResearchpeer-review

Abstract

The ISO 27001 standard specifies an information security management system (ISMS) as a means to implement security best practices for IT systems. Organisations that implement an ISMS typically experience various challenges such as enforcing a common vocabulary, limiting human errors and integrating existing management tools and security mechanisms. However, ISO 27001 does not provide guidance on these issues because tool support is beyond its scope, leaving organisations to start "from scratch" with manual and usually paper document-driven approaches. We propose a novel reference platform for security management that provides the foundation for systematic and automated ISMS tool support. Our platform consists of a unified information model, an enterprise-level repository and an extensible application and integration platform that aid practitioners in tackling the aforementioned challenges. This paper motivates and outlines the key elements of our approach and presents a first proof-of-concept prototype implementation.

Original languageEnglish
Title of host publicationEngineering Secure Software and Systems - Third International Symposium, ESSoS 2011, Proceedings
PublisherSpringer
Pages256-263
Number of pages8
ISBN (Print)9783642191244
DOIs
Publication statusPublished - 7 Feb 2011
Externally publishedYes
EventInternational Symposium on Engineering Secure Software and Systems 2011 - Madrid, Spain
Duration: 9 Feb 201110 Feb 2011
Conference number: 3rd
https://link.springer.com/book/10.1007/978-3-642-19125-1 (Proceedings)

Publication series

NameLecture Notes in Computer Science
PublisherSpringer
Volume6542
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

ConferenceInternational Symposium on Engineering Secure Software and Systems 2011
Abbreviated titleESSoS 2011
CountrySpain
CityMadrid
Period9/02/1110/02/11
Internet address

Cite this

Müller, I., Han, J., Schneider, J. G., & Versteeg, S. (2011). Idea: A reference platform for systematic information security management tool support. In Engineering Secure Software and Systems - Third International Symposium, ESSoS 2011, Proceedings (pp. 256-263). (Lecture Notes in Computer Science; Vol. 6542). Springer. https://doi.org/10.1007/978-3-642-19125-1_20