Framework to implement information security management systems: An asset to project management processes

被引：0

作者：

Mena, Alvaro ^{[1
]}

机构：

[1] Univ Costa Rica, Informat Empresarial, San Jose, Costa Rica

来源：

2018 37TH INTERNATIONAL CONFERENCE OF THE CHILEAN COMPUTER SCIENCE SOCIETY (SCCC) | 2018年

关键词：

data protection; framework; information security; information security management system; methodology; project management;

D O I：

暂无

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

This article shows how the creation of a quality framework, composed by processes to implement an information security management system (ISMS), provides a methodological approach and assets that can be used in project management processes. The content of this framework meets the requirements suggested by the standard ISO/IEC 27001 for implementing an ISMS and they were systematized by means of the SPEM 2.0 meta-model and the Eclipse Process Framework Composer software. The results show how it is possible to derive benefits for the project management processes recommended by the Management Institute Project Management (PMI) and also offers benefits in terms of quality. Besides it provides a systematic approach that can be replicated to comprise knowledge in project management methodology.

引用

页数：8