NDLI: A Database System for Effective Utilization of ISO/IEC 27002

Content Provider	IEEE Xplore Digital Library
Author	Iqbal, A. Horie, D. Goto, Y. Jingde Cheng
Copyright Year	2009
Abstract	ISO/IEC 27002 is an international standard for information security management. Although many organizations need to manage their information systems according to ISO/IEC 27002, ISO/IEC 27002 is not convenient for users to retrieve terms, definitions, and security controls and to make documents for information security management because the ISO/IEC 27002 is distributed only in form of booklet or PDF. On the other hand, ISEE, an information security engineering environment, has been proposed to support all tasks in from requirement analysis to maintenance of security facilities of software/information systems. ISEDS, an information security engineering database system, as a main component of ISEE, is planed manage all ISO standards related with information security and their concerning documents. This paper presents a database system for effective utilization of ISO/IEC 27002 that is obtained by adding ISO/IEC 27002 and related documents into ISEDS. The paper analyzes usages of ISO/IEC 27002, gives requirement analysis of the database system, presents a design and construction of the database system, and shows a usage example. The paper also investigates a systematic method to construct databases of ISO standards for information security in ISEDS.
Starting Page	607
Ending Page	612
File Size	345079
Page Count	6
File Format	PDF
ISBN	9780769539324
e-ISBN	9781424454679
DOI	10.1109/FCST.2009.88
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-12-17
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Data security ISO standards Information retrieval Control systems Information management Information analysis ISMS IEC standards Information security Management information systems Database systems ISO/IEC 27002 information security management information security engineering environment
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

ISEDS: An Information Security Engineering Database System Based on ISO Standards

Introducing Information Security Concepts and Standards in Higher Education

ISO/IEC 27000, 27001 and 27002 for Information Security Management

A practical implementation of ISMS

A comparison between business process management and information security management

Combining ITIL, COBIT and ISO/IEC 27002 in Order to Design a Comprehensive IT Framework in Organizations

ISO/IEC 27001 implementation in public organizations: A case study

The ISO/IEC 27002 and ISO/IEC 27799 information security management standards : a comparative analysis from a healthcare perspective

Evaluating the conformity of an access control architecture for Virtual Organizations with ISO/IEC 17799

A Database System for Effective Utilization of ISO/IEC 27002

Similar Documents

ISEDS: An Information Security Engineering Database System Based on ISO Standards

Introducing Information Security Concepts and Standards in Higher Education

ISO/IEC 27000, 27001 and 27002 for Information Security Management

A practical implementation of ISMS

A comparison between business process management and information security management

Combining ITIL, COBIT and ISO/IEC 27002 in Order to Design a Comprehensive IT Framework in Organizations

ISO/IEC 27001 implementation in public organizations: A case study

The ISO/IEC 27002 and ISO/IEC 27799 information security management standards : a comparative analysis from a healthcare perspective

Evaluating the conformity of an access control architecture for Virtual Organizations with ISO/IEC 17799

A Database System for Effective Utilization of ISO/IEC 27002