A Study on Selection of Core Services for Deciding ISMS ScopeA Study on Selection of Core Services for Deciding ISMS Scope
- Authors
- 강현식; 김정덕
- Issue Date
- 2017
- Publisher
- 한국컴퓨터정보학회
- Keywords
- The Scope of ISMS; Information Security Task; Core services; Mission-critical Service; High risk service
- Citation
- 한국컴퓨터정보학회논문지, v.22, no.2, pp 51 - 57
- Pages
- 7
- Journal Title
- 한국컴퓨터정보학회논문지
- Volume
- 22
- Number
- 2
- Start Page
- 51
- End Page
- 57
- URI
- https://scholarworks.bwise.kr/cau/handle/2019.sw.cau/5975
- DOI
- 10.9708/jksci.2017.22.02.051
- ISSN
- 1598-849X
2383-9945
- Abstract
- The first thing to be prioritized is to set the scope of the management system when establishing an information security management system for systematic and effective information security management. It is important to set the scope for an organization’s information security goals due to the scope affects the organization’s overall information security activities. If the scope is set incorrectly, it might become impossible to protect important services and therefore, the scope of the management system should be determined in consideration of the core business services of the organization. We propose a core service selection model based on the organization’s mission-critical service and high risk service in order to determine the effective information security management system scope in this paper. Core service selection criteria include the type of service, contribution to sales, socio-economic impact, and linkage with other services
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - College of Business & Economics > Department of Industrial Security > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/cau/handle/2019.sw.cau/5975)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.