USIS: A unified framework for secured information system lifecycle

Abstract

Information security ≠ information system + security features such as access control and intrusion detection. Security considerations must be an integral part of the entire lifecycle of the information system. This paper presents a framework to systematically classify all security considerations throughout the lifecycle of an information system. This framework can be seamless integrated into mainstream information system development frameworks and can serve as an effective guide for both students as well as practicing information system professional.