The IRMA Community
Newsletters
Research IRM
Click a keyword to search titles using our InfoSci-OnDemand powered search:
|
Enterprise Information Security Policies, Standards, and Procedures: A Survey of Available Standards and Guidelines
|
|
Author(s): Syed Irfan Nabi (Institute of Business Administration, Pakistan & King Saud University, Saudi Arabia), Ghmlas Saleh Al-Ghmlas (Center of Excellence in Information Assurance (CoEIA), King Saud University, Saudi Arabia)and Khaled Alghathbar (Center of Excellence in Information Assurance (CoEIA), King Saud University, Saudi Arabia)
Copyright: 2014
Pages: 24
Source title:
Crisis Management: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Information Resources Management Association (USA)
DOI: 10.4018/978-1-4666-4707-7.ch036
Purchase
|
Abstract
This chapter explores enterprise information security policies, standards, and procedures. It examines the existing resources, analyses the available options, and offers recommendations to the CIOs and other people that have to make decisions about policies, standards, and procedures to ensure information security in their enterprise. Additionally, the need, requirements, and audience for different types of security documents are scrutinized. Their mutual relationship is examined, and the association among them is illustrated with a diagram supplemented by an example to bring about better comprehension of these documents. It is important to know the sources and organizations that make standards and guidelines. Therefore, the major ones are discussed. This research involved finding all of the relevant documents and analyzing the reasons for the ever-increasing number of newer ones and the revisions of the existing ones. Various well-known and established international, as well as national, information security standards and guidelines are listed to provide a pertinent collection from which to choose. The distinguishing factors and common attributes are researched to make it easier to classify these documents. Finally, the crux of the chapter involves recommending appropriate information security standards and guidelines based on the sector to which an organization belongs. An analysis of the role played by these standards and guidelines in the effectiveness of information security is also discussed, along with some caveats. It is important for practitioners and researchers to know what is available, who the key players are, and the potential issues with information security standards and guidelines; they are all concisely presented in this chapter.
Related Content
|
Christopher Nyakotyo, Pedzisai Goronga.
© 2024.
18 pages.
|
|
Colleen Halupa.
© 2024.
23 pages.
|
|
Stefan Handke.
© 2024.
14 pages.
|
|
Jaime Santos-Reyes, Galdino Santos-Reyes, Ricardo Tejeida-Padilla.
© 2024.
19 pages.
|
|
Ahmad Kayaly.
© 2024.
20 pages.
|
|
Elizabeth Stroble.
© 2024.
15 pages.
|
|
Mubango Hazel, Hlanganipai Ngirande, Khathutshelo Khashane.
© 2024.
20 pages.
|
|
|