Research on Security Management Plan for Enterprise Information Systems

Abstract:

With the development of computer and network science, enterprises have built lots of information systems for enterprise management, the security management of the information systems if becoming more and more important for most of the enterprises.In this study of information security management plan,enterprises can implement a set of controls based on the controls checklists obtained from risk assesment to achieve information security.

• Periodical: Applied Mechanics and Materials (Volumes 380-384)
• Pages: 2560-2563
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.380-384.2560
• Online since: August 2013
• Authors: Ru Xin Gou, Ting Jie Lu
• Keywords: Enterprise Information System, Risk Assessment, Security Controls

References

[1] Zhu Xuan. Research and implementation of iso27001-based information security management system. Master degree thesis of Shanghai Jiao Tong University, (2009).

[2] Cheng Jian-hua, Jing Ji-peng. Study on Method for Information Security Risk Evaluation . Computer Security, no. 3, pp.26-29, (2008).

[3] Fenz, S, Ekelhart, A. Verification, Validation, and Evaluation in Information Security Risk Management, Security & Privacy, IEEE , vol. 9, no. 2, pp.58-65, (2011).

DOI: 10.1109/msp.2010.117

[4] ISO/IEC 27002: 2005. Information technology - Security techniques - Code of practice for information security management. http: /www. iso. org/iso/home/store/catalogue_ics/ catalogue _detail _ics. htm?csnumber=50297.

DOI: 10.3403/30404989

[5] COBIT 5: A Business Framework for the Governance and Management of Enterprise IT. http: /www. isaca. org/ COBIT/ Pages/default. aspx.