Standardization of all Information Security Management Systems

Abstract

Information security relates to the protection of Information Technology assets against the risks of loss, misuse, disclosure or damage. Information security management system (ISMS) is controls that organizations need to implement to ensure that it is sensibly managing these risks. In the other hands, all IDSs/IPSs do many efforts to control networks attacks. In this article we propose creating standard platform for all information security management systems. Also we suggest placing standard knowledgebase in the new added section in ISMSs to create standard security implementation. With this, all information security management systems will be more powerful and decreasing/increasing new plans in organizations will be done easier.