THE PROPOSAL OF SOFTWARE DEVELOPMENT AND ACQUISITION METRICS BASED ON ISO/IEC 27001 STANDARD

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F60076658%3A12510%2F09%3A00011121" target="_blank" >RIV/60076658:12510/09:00011121 - isvavai.cz</a>

Výsledek na webu

—

DOI - Digital Object Identifier

—

Jazyk výsledku

angličtina

Název v původním jazyce

THE PROPOSAL OF SOFTWARE DEVELOPMENT AND ACQUISITION METRICS BASED ON ISO/IEC 27001 STANDARD

Popis výsledku v původním jazyce

The implementation and operation of efficient information security management systems (ISMS) according to the ISO/IEC 27001 standard involves a number of steps, among others implementation and operation of appropriate processes, policies and objectives.The crucial issue is the correct definition of the metrics for measurement of the effectiveness of established processes and established controls. The paper describes some practical metrics for ISMS processes review but primarily deals with the metrics for the security category ?Security in development and support processes? from the security control clause ?Information systems acquisition, development and maintenance processes? (ISO/IEC 27001, ISO/IEC 27002). Judged by the authors? research and experience, organizations often concentrate mainly on other security categories (Correct processing in application, Cryptographic controls, Security of system files) from the security control clause ?Information systems acquisition, development

Název v anglickém jazyce

THE PROPOSAL OF SOFTWARE DEVELOPMENT AND ACQUISITION METRICS BASED ON ISO/IEC 27001 STANDARD

Popis výsledku anglicky

The implementation and operation of efficient information security management systems (ISMS) according to the ISO/IEC 27001 standard involves a number of steps, among others implementation and operation of appropriate processes, policies and objectives.The crucial issue is the correct definition of the metrics for measurement of the effectiveness of established processes and established controls. The paper describes some practical metrics for ISMS processes review but primarily deals with the metrics for the security category ?Security in development and support processes? from the security control clause ?Information systems acquisition, development and maintenance processes? (ISO/IEC 27001, ISO/IEC 27002). Judged by the authors? research and experience, organizations often concentrate mainly on other security categories (Correct processing in application, Cryptographic controls, Security of system files) from the security control clause ?Information systems acquisition, development

Druh

J_x - Nezařazeno - Článek v odborném periodiku (Jimp, Jsc a Jost)

CEP obor

IN - Informatika

OECD FORD obor

—

Projekt

—

Návaznosti

V - Vyzkumna aktivita podporovana z jinych verejnych zdroju

Rok uplatnění

2009

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název periodika

Acta Universitatis Bohemiae Meridionales : vědecký časopis pro ekonomiku, řízení a obchod

ISSN

1212-3285

e-ISSN

—

Svazek periodika

12

Číslo periodika v rámci svazku

3

Stát vydavatele periodika

CZ - Česká republika

Počet stran výsledku

6

Strana od-do

—

Kód UT WoS článku

—

EID výsledku v databázi Scopus

—