Is ISMS for financial organizations effective on their business?

Abstract

The aim of this study is to encourage enterprises to participate in information security and raise awareness of information security. We have analyzed the economic effect of an enterprise's performance through an ISMS certification system and proposed a plan to facilitate information security activities. We investigate an increase in enterprise value and information security industry activation, and utilized an enterprise's financial statement for economic effects, including creation of a measurement formula. We also conducted a survey to collect practical data. As a result of analysis, the enterprise, which implemented ISMS, has caused approximately $22,000 increase in enterprise value on average, and created 2.47 people of employment annually. In addition, the number of ISMS certification cases will increase at a rate of 100%. © 2012 Elsevier Ltd.