2012/04/06 by Heru Susanto, Fahad Bin Muhaya, Susanto, Heru +5
Business, Management and Accounting · Computer Science · #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Information Technology Governance and Strategy #Information and Cyber Security #Network Security and Intrusion Detection
paper · pdf · doi:10.48550/arxiv.1204.1385
openalex publication_date 2012/04/06 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
It is imperative for organizations to us Information Security Management System (ISMS) to effectively manage their information assets. ISMS starts with a set of policies that dictate the usage computer resources. It starts with the "21 essential security controls" of ISO 27001, which give the basic standard requirements of information security management. Our research is concerned with the assessment of the application of these controls to organizations. STOPE (Strategy, Technology Organization, People and Environment) methodologies were used to integrated domains as a framework for this assessment. The controls are mapped on these domains and subsequently refined into "246 simple and easily comprehended elements".