Specifying Information Security Needs for the Delivery of High Quality Security Services

X. Su; D. Bolzoni; Pascal van Eck

doi:10.1109/BDIM.2007.375022

Specifying Information Security Needs for the Delivery of High Quality Security Services

X. Su, D. Bolzoni, Pascal van Eck

Research output: Contribution to conference › Paper › peer-review

199 Downloads (Pure)

Abstract

In this paper we present an approach for specifying and prioritizing information security requirements in organizations. We propose to explicitly link security requirements with the organizations' business vision, i.e. to provide business rationale for security requirements. The rationale is then used as a basis for comparing the importance of different security requirements. Furthermore we discuss how to integrate the aforementioned solution concepts into a service level management process for security services, which is an important step in IT Governance.

Original language	Undefined
Pages	112-113
Number of pages	2
DOIs	https://doi.org/10.1109/BDIM.2007.375022
Publication status	Published - May 2007
Event	2nd IEEE/IFIP International Workshop on Business-Driven IT Management, BDIM '07 - Munich, Germany Duration: 21 May 2007 → 23 May 2007

Workshop

Workshop	2nd IEEE/IFIP International Workshop on Business-Driven IT Management, BDIM '07
Period	21/05/07 → 23/05/07
Other	21-23 May 2007

Keywords

SCS-Cybersecurity
IR-74393
EWI-18742
SCS-Services

Access to Document

10.1109/BDIM.2007.375022

Cite this

@conference{94bd24a151c843df869e183fc3567dae,

title = "Specifying Information Security Needs for the Delivery of High Quality Security Services",

abstract = "In this paper we present an approach for specifying and prioritizing information security requirements in organizations. We propose to explicitly link security requirements with the organizations' business vision, i.e. to provide business rationale for security requirements. The rationale is then used as a basis for comparing the importance of different security requirements. Furthermore we discuss how to integrate the aforementioned solution concepts into a service level management process for security services, which is an important step in IT Governance.",

keywords = "SCS-Cybersecurity, IR-74393, EWI-18742, SCS-Services",

author = "X. Su and D. Bolzoni and {van Eck}, Pascal",

year = "2007",

month = may,

doi = "10.1109/BDIM.2007.375022",

language = "Undefined",

pages = "112--113",

note = "2nd IEEE/IFIP International Workshop on Business-Driven IT Management, BDIM '07 ; Conference date: 21-05-2007 Through 23-05-2007",

}

TY - CONF

T1 - Specifying Information Security Needs for the Delivery of High Quality Security Services

AU - Su, X.

AU - Bolzoni, D.

AU - van Eck, Pascal

PY - 2007/5

Y1 - 2007/5

N2 - In this paper we present an approach for specifying and prioritizing information security requirements in organizations. We propose to explicitly link security requirements with the organizations' business vision, i.e. to provide business rationale for security requirements. The rationale is then used as a basis for comparing the importance of different security requirements. Furthermore we discuss how to integrate the aforementioned solution concepts into a service level management process for security services, which is an important step in IT Governance.

AB - In this paper we present an approach for specifying and prioritizing information security requirements in organizations. We propose to explicitly link security requirements with the organizations' business vision, i.e. to provide business rationale for security requirements. The rationale is then used as a basis for comparing the importance of different security requirements. Furthermore we discuss how to integrate the aforementioned solution concepts into a service level management process for security services, which is an important step in IT Governance.

KW - SCS-Cybersecurity

KW - IR-74393

KW - EWI-18742

KW - SCS-Services

U2 - 10.1109/BDIM.2007.375022

DO - 10.1109/BDIM.2007.375022

M3 - Paper

SP - 112

EP - 113

T2 - 2nd IEEE/IFIP International Workshop on Business-Driven IT Management, BDIM '07

Y2 - 21 May 2007 through 23 May 2007

ER -