The ISO27001:2005, as an information security management system (ISMS), is establishing itself more and more as the security standard in enterprises. In 2008 more than 4457 certified enterprises could be registered worldwide. Nevertheless, the registering an ISMS still says nothing about the quality and performance of its implementation. Therefore, in this article, a method for measuring the performance of the implementation and operation of an ISMS is presented.
Published in:
Emerging Security Information, Systems and Technologies, 2008. SECURWARE '08. Second International Conference on
Date of Conference: 25-31 Aug. 2008