Home > Explore Content > All Issues > Article View
A Study on Selection of Core Services for Deciding ISMS Scope
Journal of The Korea Society of Computer and Information
Abbr :
JKSCI
2017, 22(2), pp.51-57
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
2017, 22(2), pp.51-57
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
-
The first thing to be prioritized is to set the scope of the management system when establishing an information security management system for systematic and effective information security management. It is important to set the scope for an organization’s information security goals due to the scope affects the organization’s overall information security activities. If the scope is set incorrectly, it might become impossible to protect important services and therefore, the scope of the management system should be determined in consideration of the core business services of the organization. We propose a core service selection model based on the organization’s mission-critical service and high risk service in order to determine the effective information security management system scope in this paper. Core service selection criteria include the type of service, contribution to sales, socio-economic impact, and linkage with other services
84 Viewed
Print this page
Download PDF