Information Security: Process Evaluation and Product Evaluation

摘要

Effective managerment in any organisation requires a holistic approach in focusing on information security. Senior managers have to know how well their organisations are performing as measured against internationally accepted best practices. Part of the information secruity management problem is that it is viewed either from a technormation security management problem is that it is viewed either from a technological perspective focussing on product evaluation only, or from a procedural and management perspective focussing on evaluation of the management processes. This paper aims to provide a consolidated perspective that takes both these aspects into provide a consolidated perspective that takes both these aspects into consideration when measuring and evaluation the information security level of an organisation.