The Revival of Ancient Information Security Models, Insight in Risks and Selection of Measures

As risk managers and IT auditors, we are confronted with too many standards and types of certificates for information security and privacy protection (IS&PP). In the scope of Knowledge Management and Enrichment, a critical review has been performed revealing that any and all standards and certifications use a common approach and their assessments generally lead to a similar set of security measures. In this paper, we derive the basics of some of these standards and revive the underlying scientific models. We explain the principles of IT risk management and the selection of an appropriate set of IS&PP measures with a single Cube, assisting risk managers and IT auditors in standardizing their work.