Governing Information Security in Conjunction with COBIT and ISO 27001

2011/08/10 by Mataracioglu, Tolga, Ozkan, Sevgi
#Cryptography and Security (cs.CR) #FOS: Computer and information sciences

paper · doi:10.48550/arxiv.1108.2150

Abstract

In this paper, after giving a brief definition of Information Security Management Systems (ISMS), ISO 27001, IT governance and COBIT, pros and cons of implementing only COBIT, implementing only IS0 27001 and implementing both COBIT and ISO 27001 together when governing information security in enterprises will be issued.

Related

• A Novel Method on ISO 27001 Reviews: ISMS Compliance Readiness Level Measurement
• Refinement of Strategy and Technology Domains STOPE View on ISO 27001
• Integrated Solution Modeling Software: A New Paradigm on Information Security Review
• Integrated Solution Modeling Software: A New Paradigm on Information Security Review and Assessment
• Security level analysis of academic information systems based on standard ISO 27002:2003 using SSE-CMM