Approaches for Implementing and Operationalising Information Security Controls

This paper examines the principal drivers and existing approaches for implementing information security controls, highlighting gaps in common guidance. To help information security professionals, a new approach is proposed as an adaptable ten-method model to support effective implementation and operationalisation of security controls. Two control implementation scenarios illustrate the model’s practical applicability.