정보보호 관리범위 결정을 위한 핵심업무서비스 선정에 관한 연구
A Study on Selection of Core Services for Deciding ISMS Scope
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
The first thing to be prioritized is to set the scope of the management system when establishing an information security management system for systematic and effective information security management. It is important to set the scope for an organization’s information security goals due to the scope affects the organization’s overall information security activities. If the scope is set incorrectly, it might become impossible to protect important services and therefore, the scope of the management system should be determined in consideration of the core business services of the organization. We propose a core service selection model based on the organization’s mission-critical service and high risk service in order to determine the effective information security management system scope in this paper. Core service selection criteria include the type of service, contribution to sales, socio-economic impact, and linkage with other services
Abstract
The first thing to be prioritized is to set the scope of the management system when establishing an information security management system for systematic and effective information security management. It is important to set the scope for an organization’s information security goals due to the scope affects the organization’s overall information security activities. If the scope is set incorrectly, it might become impossible to protect important services and therefore, the scope of the management system should be determined in consideration of the core business services of the organization. We propose a core service selection model based on the organization’s mission-critical service and high risk service in order to determine the effective information security management system scope in this paper. Core service selection criteria include the type of service, contribution to sales, socio-economic impact, and linkage with other services
참고문헌 (19)
- KISA, "A Guide for the Certification of Information Security Management System" (2016), KISA
- Telecommunications Technology Association, "A Guide for Establishing the Scope of Information Security Management System", TTAK.KO, ~ (2012)
- "ISO", IEC JTC 1, IEC 27001:2013Information security management systems Requirements”, pp.ISO, IEC[DOI]
- "ISO", IEC JTC 1, IEC 27003:2010Information security management systems implementation guidance”, pp.ISO, IEC[DOI]
- Ray Bernard, "Information Lifecycle Security Risk Assessment: A tool for closing security gaps", computers & security, 26(1), pp.26~30 (2007)
- J. K. Lee, "Diagnosis and evaluation of non-core businesses in Public enterprise", Public institution research focus, 0(0), pp.113~138 (2013)
- Handa junichi, "Centennial company" (2004), New proposal Publishers
- J. H. Yang, "Service, Marketing" (2011), INITIAL COMMUNICATIONS Corp
- "ISO", IEC JTC 1, IEC 27000:2016Information security management systems:Overview and vocabulary”, pp.ISO, IEC[DOI]
- NIST, "FIPS PUB 199: Standards for Security Categorization of Federal Information and Information Systems" (2004), NIST
- Ministry of Science, "ICT and Future Planning, Guidelines for Designation Criteria for Major IT Infrastructure Facilities" (2015), Ministry of Science
- N. H. Kim, "Criteria for calculating the importance of information security in E-government public service", Internet &security focus, 3(0), pp.47~59 (2014)
- 엄재하, "정보보안사고가 투자주체별 투자성과에 미치는 영향: 개인정보유출사고 중심으로", 정보보호학회논문지, 26(2), pp.463~474 (2016), 한국정보보호학회[DOI]
- J. Hue, "A Study on New Methodology for Designating Core Information Infrastructure", Internet & Security Focus, 9(1), pp.26~35 (2013)
- 강민아, "통합 연구 방법 적용 가능성에 대한 탐색 연구: 지역 보건 정책 결정을 위한 주민 의견 조사에 설문 조사와 포커스 그룹 방법의 통합적 적용", 한국행정학보, 41(4), pp.415~437 (2007), 한국행정학회
- David L. Morgan, "Focus Groups", Annual Review of Sociology, 22(1), pp.129~152 (1996)
- Krueger, R. A, "Focus Groups: A Practical Guide for Applied Research" (2008), SAGE Publications
- Derek Cabrera, "What is the crisis? Defining and prioritizing the world’s most pressing problems", Frontiers in Ecology and the Environment, 6(9), pp.469~475 (2008)
- Ministry of Knowledge Economy, "Knowledge Economy Statistics Portal Information Strategy Planning" (2012), Ministry of Knowledge Economy