본문 바로가기
  • Home

IT GRC-based IT security internal control system

  • Journal of Knowledge Information Technology and Systems
  • Abbr : JKITS
  • 2014, 9(3), pp.369-378
  • Publisher : Korea Knowledge Information Technology Society
  • Research Area : Interdisciplinary Studies > Interdisciplinary Research
  • Published : June 30, 2014

유영록 1 Seongchae Seo 2 Lee Sang Joon 2 김병기 2

1씨에이에스
2전남대학교

Accredited

ABSTRACT

In this thesis, a novel IT security internal control system is proposed in order to guarantee the enterprise-wide perspective internal control which accommodates administrative, technical and physical internal control enforcement plan. Firstly, the proposed IT security internal control system synthetically manages IT security processes which are composed of information security processes, privacy processes and security service processes from the perspective of governance. Secondly, it integrates IT related logs based on Big Data to synthetically monitor information security control breach and information leakage anomaly, monitors Key Risk Indicator (KRI) for the information security threat scenario, analyses, alarms and reponses results of monitoring them from the perspective of the risk management. Lastly, it integrates and manages law and regulations related to IT security from the perspective of compliance and provides the automated and integrated IT security internal control environments to the system managers. The proposed thesis proves to be an automatical and efficient scheme to offer the IT security internal control environments through the case of a system installation in a financial company.

Citation status

* References for papers published after 2023 are currently being built.