Swiss army knife of software processes generic framework of ISO 27001 and its mapping on resource management

Process reuse has gained much attention recently due to its tangible benefits. Similar benefits can also be obtained by reusing frameworks of existing standards. One such example is ISO 27001 standard that has a generic framework which can be used for improvement of areas other than information security. This paper presents the results of a case study in which we performed a mapping of ISO 27001 standard on resource management of a real-world organization by applying clauses and evaluating degree of applicability. Findings show that all clauses of ISO 27001 standard except Clause 6 are applicable to resource management. The framework of ISO 27001, therefore, seems flexible enough to be used for the improvement and process maturation of other management areas by defining relevant controls.