A Structured Comparison of the Corporate Information Security Maturity Level - ICT Systems Security and Privacy Protection Access content directly
Conference Papers Year : 2019

A Structured Comparison of the Corporate Information Security Maturity Level

Abstract

Generally, measuring the information security maturity is the first step to build a knowledge information security management system in an organization. Unfortunately, it is not possible to measure information security directly. Thus, in order to get an estimate, one has to find reliable measurements. One way to assess information security is by applying a maturity model and assess the level of controls. This does not need to be equivalent to the level of security. Nevertheless, evaluating the level of information security maturity in companies has been a major challenge for years. Although many studies have been conducted to address these challenges, there is still a lack of research to properly analyze these assessments. The primary objective of this study is to show how to use the analytic hierarchy process (AHP) to compare the information security controls’ level of maturity within an industry in order to rank different companies. To validate the approach of this study, we used real information security data from a large international media and technology company.
Fichier principal
Vignette du fichier
485650_1_En_16_Chapter.pdf (616.66 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03744289 , version 1 (02-08-2022)

Licence

Attribution

Identifiers

Cite

Michael Schmid, Sebastian Pape. A Structured Comparison of the Corporate Information Security Maturity Level. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.223-237, ⟨10.1007/978-3-030-22312-0_16⟩. ⟨hal-03744289⟩
25 View
67 Download

Altmetric

Share

Gmail Facebook X LinkedIn More