Secure Information Assets with Data: An Information Security Governance Framework Using Orchestrated Data Analytics from a Holistic Perspective

摘要

Information Security (InfoSec) Governance Framework is applied to help in-house professionals, including top-level officers, as well as practitioners doing field work, in order to operate the organizational InfoSec business within a systematic approach. This paper proposes a framework from the perspective of data analytics, focusing on InfoSec data, which the front-line professionals are more familiar with. The framework introduces the logic from data collection to data analysis emphasizing the new generation data derived by raw data as well as corresponding analysis on it. Furthermore, it provides an application model to indicate how to apply the framework to an organizational environment.