Filling the void - INFOSEC in space operations

Abstract

Information is the most valuable asset of space missions and, as a space operations centre, ESOC is helping protect its confidentiality, integrity, and availability. Following international agreements, ESA has established agency-wide Security Directives that govern all aspects of security, including Information Security. Implementing these Directives in the frame of a ISO 27001 Information Security Management Systems is the subject of this paper. The content is threefold. First, we discuss ESOC's information security organization and how it is embedded in ESA's security organization. Second, we describe how this organization was created during an ongoing project. Third, we summarize lessons learned that, we believe, will ease definition and execution of similar projects elsewhere. © 2012 by ESA.