Open AccessANALYSIS OF INFORMATION SECURITY MANAGEMENT SYSTEM FRAMEWORKS
Author(s) -
Mohammad Abdu Al-esaiy,
Nagi Ali Al-Shaibany
Publication year - 2021
Publication title -
international journal of computer science and mobile computing
Language(s) - English
Resource type - Journals
ISSN - 2320-088X
DOI - 10.47760/ijcsmc.2021.v10i11.005
Subject(s) - information security management , security information and event management , information security , information security audit , confidentiality , security management , certified information security manager , standard of good practice , information security standards , computer science , computer security , information security management system , risk analysis (engineering) , set (abstract data type) , security service , business , knowledge management , process management , cloud computing security , network security policy , cloud computing , operating system , programming language
ISMS is a set of policies, activities, and procedures implemented by the Information Security Department to maintain the confidentiality, integrity, and availability of information from threats and risks. Activities and procedures include identifying security needs, strategies required for implementation, and measuring results for security improvement. This paper aims to review the previous literature to verify the factors that affect information security management. Examination of current information security frameworks and standards, and this paper concluded that, for an organization to adopt a specific framework, this framework must be evaluated based on the security needs of the organization. The framework must include all factors that affect information security from all organizational aspects, people, and technology. Otherwise, the organization will face difficulties and obstacles in implementing the framework and improving security.