An information engineering methodology for the security strategy planning

Abstract

The successful management of information security within an organization is vital to its survival and success. But, previous researches and methodologies on ISP(Information Strategy Planning) do not take security controls into consideration in strategy planning. This paper answers on difficult problems that organizations face in business environments when they try to develop strategy plans for information security by providing a methodology framework, process model and essential tools. © Springer-Verlag 2004.