...Stefan Fenz; Stefanie Plieschnegger; Heidi Hobel Purpose The purpose of this paper is to increase the degree of automation within information security compliance projects by introducing a formal representation of the ISO 27002 standard. As information is becoming more valuable and the current...

... control. The paper will be of interest to the key stakeholders: the industry, authorities and the media. © Emerald Group Publishing Limited 2012 Norway Oil industry Gas industry Standards Safety Security Resilience Distributed control systems SCADA systems Action research...

... owners, and auditors to make decisions and provide input. The project began with conventional approaches guided by the PDCA lifecycle and the usual documental pursuits required of the standard: drafting policies, performing gap analysis and diagnostic reviews, administering risk assessments...

...Mikko Siponen Traditionally, information security management standards listing generic means of protection have received a lot of attention in the field of information security management. In the background a few information security management‐oriented maturity criteria have been laid down...

.... But a new PKI model emphasises control and audit, so that certificates may be issued to different user groups under their own rules, with external assurance of fitness for purpose. This type of model is supported by existing standards certification and accreditation processes. No special new authorities...

... one another. Information security management standards should certainly play a major role in this regard. In this paper, some information security management standards and their applicability will be discussed and put into context. In the early computing days, mainframe computers with single...

...Lam‐for Kwok; Dennis Longley Information security management has been placed on a firmer footing with the publication of standards by national bodies. These standards provide an opportunity for security managers to gain senior management recognition of the importance of procedures and mechanisms...

...Barry Moule; Lina Giavara Describes, through practical recent experiences, an approach to implementing policies, standards and procedures in a large commercial enterprise. Presents an outline of a guide for those considering the long haul associated with such a major undertaking. There are few...