A web-based Information Security Management Toolbox for small-to-medium enterprises in Southern Africa

Many small-to-medium sized enterprises are finding it extremely difficult to implement proper information security governance due to cost implications. Due to this lack of resources, small enterprises are experiencing challenges in drafting information security policies as well as monitoring their i...

Full description

Saved in:
Bibliographic Details
Main Authors: Coertze, J., van Niekerk, J., von Solms, R.
Format: Conference Proceeding
Language:English
Subjects:
automation
computer security
computer software
corporate governance
enterprise security
Guidelines
Information security
Information technology
IT governance
managing information security
methodologies for securing small/medium size enterprises
Organizations
security policy and procedures
Standards organizations
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Many small-to-medium sized enterprises are finding it extremely difficult to implement proper information security governance due to cost implications. Due to this lack of resources, small enterprises are experiencing challenges in drafting information security policies as well as monitoring their implementation and compliance levels. This problem can be alleviated by means of a cost effective "dashboard system" and automated policy generation tool. This paper will critically evaluate an existing policy generation tool, known as the Information Security Management Toolbox, and will propose improvements to this existing system based on changes in both information security standards and business needs, since the development of the original system.
ISSN:2330-9881
DOI:10.1109/ISSA.2011.6027515