文献类型：会议论文

英文题名：Measuring effectiveness of information security management

作者：Liu, Hong-Li[1]; Zhu, Ying-Ju[1]

机构：[1] School of Business, East China University of Science and Technology, Shanghai, China

会议论文集：Proceedings - 1st International Symposium on Computer Network and Multimedia Technology, CNMT 2009

会议日期：December 18, 2009 - December 20, 2009

会议地点：Wuhan, China

语种：英文

外文关键词：Security of data - Industrial management

摘要：Measurements are tools designed to facilitate decision making and improve performance and accountability through collecting, analyzing, and reporting related data. ISO/IEC 27002 provides us with information security controls that will be used for getting security measures. This paper presents some operational measures based on departments in relation to information security, in order to facilitate the decision making and to improve information security management in different departments and across the organization. In addition, process of measuring information security management effectiveness is proposed. ?2009 IEEE.