Group Support Systems Research in the Field of Business Information Security: A Practitioner's View

This paper describes the application of Group Support Systems (GSS) in the field of Business Information Security Governance (BISG). The focus is on longitudinal small team collaboration -- for instance within Boards of Directors (BoD) and groups of experts -- with large amounts of items. Apart from this focus on small groups, there is an operational link to the Information Security Management cycle (Plan, Do, Check, Act i.e. ISO27000 norms). This link results for expert and management teams in collaboration on lots of items (e.g. 133 controls or in this case 228 best practices). This paper presents the findings of an initial research phase and presents a comprehensive, thoroughly selected core set of BISG practices to be used by practitioners. It shows how GSS can play a facilitating role in small team collaboration with large amounts of data. It concludes with suggestions for further empirical research into the BISG topic.