Development of ISMEE: An information security management engineering environment

Abstract

An Information Security Management System (ISMS) has become more important for any organization to manage its information assets securely. However, it is not easy for the organization to establish own ISMS, and for employees to work according to the ISMS. Therefore, ISMEE, an Information Security Management Engineering Environment, was proposed as the first engineering environment for supporting organizations with ISMSs. ISMEE integrates various tools to support all participants in an organization to perform all tasks in from preparation to abolishment of an ISMS based on ISO/IEC 27000 series, which are the international standards for ISMSs. This paper presents our implementation of ISMEE. At first, the paper investigates technical issues to realize ISMEE. Then, the paper shows how the issues are addressed and presents our current implementation of ISMEE.