DESIGN AND DEVELOPMENT OF A MASHUP-BASED APPLICATION TO SUPPORT ORGANIZATIONS' COMPLIANCE TO ISO27001

摘要

This paper presents the design and development of a mashup application that examines compliance of any given organization to ISO 27001 security guidelines. The described application performs a gap analysis, identifies relative strengths and weaknesses, collects relevant information and proposes specific recommendations to overcome security inefficiencies. The need for developing such a system has been substantiated by a survey that had been conducted in Greece and Cyprus and identified that, security mechanisms and the management of IT resources ought to be improved on a number of aspects.