CobiT Security Baseline Applied to Business Web Applications A Practical Approach for All Sizes of Organisations

摘要

Web applications can be complex when they interact with multiple systems that have varying levels of trust and there are very few established practices for their successful governance. For many organisations, web-enabled systems are their first foray into commissioning and operating bespoke software,rnand the suppliers arc often not iniormation-security-minded. CobiT is an internationally accepted standard for IT governance and control practices, CobiT Security Baseline provides a thorough, low-barrier entry point for SMEs/SMBs to assess the current risks, identify improvement goals alignedrnwith business objectives and implement controls for their web applications. A practical approach using CobiT Security Baseline will help prioritise the implementation of controls.