A Structured Comparison of the Corporate Information Security Maturity Level - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2019

A Structured Comparison of the Corporate Information Security Maturity Level

Résumé

Generally, measuring the information security maturity is the first step to build a knowledge information security management system in an organization. Unfortunately, it is not possible to measure information security directly. Thus, in order to get an estimate, one has to find reliable measurements. One way to assess information security is by applying a maturity model and assess the level of controls. This does not need to be equivalent to the level of security. Nevertheless, evaluating the level of information security maturity in companies has been a major challenge for years. Although many studies have been conducted to address these challenges, there is still a lack of research to properly analyze these assessments. The primary objective of this study is to show how to use the analytic hierarchy process (AHP) to compare the information security controls’ level of maturity within an industry in order to rank different companies. To validate the approach of this study, we used real information security data from a large international media and technology company.
Fichier principal
Vignette du fichier
485650_1_En_16_Chapter.pdf (616.66 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03744289 , version 1 (02-08-2022)

Licence

Paternité

Identifiants

Citer

Michael Schmid, Sebastian Pape. A Structured Comparison of the Corporate Information Security Maturity Level. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.223-237, ⟨10.1007/978-3-030-22312-0_16⟩. ⟨hal-03744289⟩
26 Consultations
70 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More