On an Integration of an Information Security Management System into an Enterprise Architecture

This paper presents a new approach for the integration of an Information Security Management System (ISMS), defined by the international standard ISO/IEC 27001, into an Enterprise Architecture (EA). Such an approach establishes a basis for comprehensive ISMS that reflects the entire security needs of an enterprise organization. Starting from the ISO/IEC 27001 standard, the suitability of established enterprise architectures was evaluated in a first step. As result, the approach of Braun to Business Engineering was chosen. Starting from the strategic level, we show how an ISMS can be realized in Braun's enterprise modeling scheme.