An engineering environment based on ISO/IEC 27000 series standards for supporting organizations with ISMSs

Abstract

Information Security Management Systems (ISMSs) play important roles to manage organization's information assets securely. However, organizations with ISMSs facing various challenges to develop and maintain such a complex management system effectively. Such organizations demand tools that can provide them with comprehensive support for all tasks in ISMS. This paper presents an engineering environment to support organizations with ISMSs consistently and continuously based on ISO/IEC 27000 series. At first, the paper presents challenges in ISMS and requirements analysis to address the challenges. The paper, then, presents an architecture and some use cases of the environment. © 2014 Springer-Verlag Berlin Heidelberg.