ScholarLens Back to search
2022•Lecture notes in business information processingOpen access

Method for Evaluating Information Security Level in Organisations

Mari Seeba, Sten Mäses, Raimundas Matulevičius

Open full text 4 citations

Abstract

Abstract This paper introduces a method for evaluating information security levels of organisations using a developed framework. The framework is based on Estonian Information Security Standard categories which is compatible with ISO 27001 standard. The framework covers both technical and organisational aspects of information security. The results provide an overview of security to the organisation’s management, compare different organisations across the region, and support strategic decision-making on a national level.

Open-access reader

About this research paper

What this paper is about

Abstract This paper introduces a method for evaluating information security levels of organisations using a developed framework. The framework is based on Estonian Information Security Standard categories which is compatible with ISO 27001 standard. The framework covers both technical and organisational aspects of information security. The results provide an overview of security to the organisation’s management, compare different organisations across the region, and support strategic decision-making on a national level.

Why it matters

OpenAlex reports 4 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

Abstract This paper introduces a method for evaluating information security levels of organisations using a developed framework. The framework is based on Estonian Information Security Standard categories which is compatible with ISO 27001 standard. The framework covers both technical and organisational aspects of information security. The results provide an overview of security to the organisation’s management, compare different organisations across the region, and support strategic decision-making on a national level.

Key concepts: Information security management system, Standard of Good Practice, Information security, Information security management, Information systems security, ITIL security management, Information security standards, Security management

Related papers

Related paper 1Related paper 2Related paper 3
Back to paper searchBrowse research topicsOriginal source
Method for Evaluating Information Security Level in Organisations — Research Paper | ScholarLens