Veselin Monev
Information security practitioner
Switzerland
e-mail: veselin.monev@gmail.com
Abstract:
This paper introduces the concept of an “IT-centric ISMS”, which deviates from traditional approaches to establishing an ISMS by emphasising IT security. Unlike resource-intensive holistic information security programs, the IT-centric ISMS is designed and managed solely by the IT unit. To implement this approach effectively, security specialists should evaluate the suitability of controls within security frameworks and select those best suited to organisational objectives and limitations. To meet this need, this paper proposes a method for evaluating security controls across frameworks, thus facilitating the selection of controls that fit the purpose.
Key words:
controls
criteria
frameworks
ISMS
suitability
Section:
The full text of the report is included in IEEE InfoTech-2024 eProceedings
and will be available on the IEEE Xplorer DL website
https://ieeexplore.ieee.org/xpl/conhome/1828024/all-proceedings
and will be available on the IEEE Xplorer DL website
https://ieeexplore.ieee.org/xpl/conhome/1828024/all-proceedings