NDLI: Maturity analysis of information access control in an organization

Content Provider	IEEE Xplore Digital Library
Author	Favacho de Araujo, A.P. von Paumgartten, P.F. de Carvalho Fonseca, A.C.
Copyright Year	2013
Description	Author affiliation: Dept. de Comput., Univ. Catolica de Brasilia - UCB, Brasília, Brazil (von Paumgartten, P.F.) \|\| Dept. de Comput. - CIC, Univ. de Brasilia - UnB, Brasília, Brazil (Favacho de Araujo, A.P.; de Carvalho Fonseca, A.C.)
Abstract	Even an organization that does not know IT as its core business invest in actions that seek to increase the information security to achieve their strategic objectives. The information access control appears as one of the pillars to ensure the information security. Internationally adopted standards such as ISO/IEC 27002, and libraries of best practices such COBIT emerge as a source of knowledge but are not methodologies that indicate action to be taken. This study sought to correlate these standards to evaluate the maturity of processes and controls of information access control in an organization. A survey applied to organization analysts was added to this methodology and showed a low degree of maturity of these controls and mapped the need to develop basic standards as an Information Security Policy and operational standards, as a way to reduce the uncontrolled and inappropriate use of IT resources of the organization. These vulnerabilities pose a threat to organization strategic information security.
Starting Page	1
Ending Page	6
File Size	193974
Page Count	6
File Format	PDF
ISBN	9789899843400
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-06-19
Publisher Place	Portugal
Access Restriction	Subscribed
Rights Holder	AISTI
Subject Keyword	Process control ISO standards NBR ISO/IEC 27002 Information Security Process Maturity Computer aided instruction IEC standards COBIT Standards organizations Maturity Model Organizations Access Control Monitoring
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Combining ITIL, COBIT and ISO/IEC 27002 in Order to Design a Comprehensive IT Framework in Organizations

A comparison between business process management and information security management

A model to assess the maturity level of the Risk Management process in information security

Information security, new approach

A Database System for Effective Utilization of ISO/IEC 27002

Comparative Analysis and Design of Cybersecurity Maturity Assessment Methodology Using NIST CSF, COBIT, ISO/IEC 27002 and PCI DSS

Evaluating the conformity of an access control architecture for Virtual Organizations with ISO/IEC 17799

ISO/IEC 27000, 27001 and 27002 for Information Security Management

A Maturity Model for Business Transformation Management

Maturity analysis of information access control in an organization

Similar Documents

Combining ITIL, COBIT and ISO/IEC 27002 in Order to Design a Comprehensive IT Framework in Organizations

A comparison between business process management and information security management

A model to assess the maturity level of the Risk Management process in information security

Information security, new approach

A Database System for Effective Utilization of ISO/IEC 27002

Comparative Analysis and Design of Cybersecurity Maturity Assessment Methodology Using NIST CSF, COBIT, ISO/IEC 27002 and PCI DSS

Evaluating the conformity of an access control architecture for Virtual Organizations with ISO/IEC 17799

ISO/IEC 27000, 27001 and 27002 for Information Security Management

A Maturity Model for Business Transformation Management

Maturity analysis of information access control in an organization