NDLI: Information Security Governance control through comprehensive policy architectures

Content Provider	IEEE Xplore Digital Library
Author	Von Solms, R. Thomson, K.-L. Maninjwa, M.
Copyright Year	2011
Description	Author affiliation: Director: Institute of ICT, Advancement, NMMU, Port Elizabeth, South Africa (Von Solms, R.) \|\| Institute of ICT Advancement, NMMU Port Elizabeth, South Africa (Thomson, K.-L.; Maninjwa, M.)
Abstract	Information Security Governance has become one of the key focus areas of strategic management due to its importance in the overall protection of the organization's information assets. A properly implemented Information Security Governance framework should ideally facilitate the implementation of (directing), and compliance to (control), Strategic level management directives. These Strategic level management directives are normally interpreted, disseminated and implemented by means of a series of information security related policies. These policies should ideally be disseminated and implemented from the Strategic management level, through the Tactical level to the Operational level where eventual execution takes place. Control is normally exercised by capturing data at the lowest levels of execution and measuring compliance against the Operational level policies. Through statistical and summarized analyses of the Operational level data into higher levels of extraction, compliance at the Tactical and Strategic levels can be facilitated. This scenario of directing and controlling defines the basis of sound Information Security Governance. Unfortunately, information security policies are normally not disseminated onto the Operational level. As a result, proper controlling is difficult and therefore compliance measurement against all information security policies might be problematic. The objective of this paper is to argue towards a more complete information security policy architecture that will facilitate complete control, and therefore compliance, to ensure sound Information Security Governance.
Starting Page	1
Ending Page	6
File Size	1781094
Page Count	6
File Format	PDF
ISBN	9781457714818
e-ISBN	9781457714832
DOI	10.1109/ISSA.2011.6027522
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-08-15
Publisher Place	South Africa
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Information security governance Standards organizations Information security Process control Organizations Computer architecture Documentation Policy architecture Direct-control Information security policies
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Information security governance control through comprehensive policy.

Optimizing Security Efficiency through Effective Risk Management

Information security governance and how to accomplish it

Towards a Holistic Information Security Governance Framework for SOA

Information technology governance — COBIT model

SOX Act and IT Security Governance

CommonGOV: A consolidate approach for governance of service-oriented architecture

Management Wake-Up and Govern: The Era of the Cyber Security Governance

A web-based Information Security Management Toolbox for small-to-medium enterprises in Southern Africa

Information Security Governance control through comprehensive policy architectures

Similar Documents

Information security governance control through comprehensive policy.

Optimizing Security Efficiency through Effective Risk Management

Information security governance and how to accomplish it

Towards a Holistic Information Security Governance Framework for SOA

Information technology governance — COBIT model

SOX Act and IT Security Governance

CommonGOV: A consolidate approach for governance of service-oriented architecture

Management Wake-Up and Govern: The Era of the Cyber Security Governance

A web-based Information Security Management Toolbox for small-to-medium enterprises in Southern Africa

Information Security Governance control through comprehensive policy architectures