Model design of information security governance assessment with collaborative integration of COBIT 5 and ITIL (case study: INTRAC)

摘要

Management of information without regard to risk the achievement of enterprise goals can have an impact on organizational performance, financial loss or organization's credibility. The risk control for the negative effects and utilization of chance in achieving enterprise goals is called information security. Information security are generally solved by partial and limited. It also happens to INTRAC that apply only management area of information security by adopting ISO/IEC 27001:2009 and ISO/IEC 27002:2005. This study aims to develop process assessment model that support the implementation of information security governance on an organization. The method used in this study is qualitative method. Based on the validation by expert judgment, information security governance model has been prepared in accordance with the requirements of information security, particularly in the INTRAC.