Development of an IT-Security Performance Measurement System

Michael Scheer

ISBN 10: 3838667883 / ISBN 13: 9783838667881

Published by Diplom.De, 2003

About this Item

nach der Bestellung gedruckt Neuware - Printed after ordering - Bachelorarbeit aus dem Jahr 2003 im Fachbereich BWL - Controlling, Note: 1,7, Evangelische Fachhochschule Darmstadt (unbekannt), Sprache: Deutsch, Abstract: Inhaltsangabe:Abstract:Adequate security of information and the systems that process it is a fundamental management responsibility. Management must understand the current status of their IT-Security program in order to make informed decisions.In this context, this Bachelor Thesis proposes a Performance Measurement System for IT-Security, which is designed to be well-balanced and comprehensive. It views IT-Security from four perspectives: Organisational, Financial, Operational and Personnel.The documentation of the system contains the key figures and their interrelationships. With its modular design, it can either be used out-off-the-box or tailored to the specific requirements of the organisation.Chapter 1 briefly discusses the reason for this Bachelor Thesis and introduces the problem statement. Chapter 2 explores the basic concepts behind both IT-Security and performance measurement. Chapter 3 covers general requirements, which are fundamental principles needed to be taken into consideration when building an IT-Security Performance Measurement System. Chapter 4 describes the approach taken for the design of the system. Chapter 5 introduces the Performance Measurement System for IT-Security.Inhaltsverzeichnis:Table of Contents:1.Introduction11.1Motivation11.2Problem Statement22.Theoretical Background32.1Performance Measurement42.1.1Definitions42.1.2Key Figures42.1.3The Balanced Scorecard62.2IT-Security72.2.1Goals of IT-Security72.2.2Security Policy92.2.3Incident Response102.3Risk Management112.3.1The Asset/Threat/Vulnerability/Safeguard Concept112.3.2Risk Assessment122.3.3Risk Mitigation132.4Existing Standards for IT-Security142.4.1Standards for Information Security Management142.4.2Standards for Evaluation152.4.3Standards for Development152.4.4Standards for a Common Terminology163.Requirements193.1General Requirements203.1.1Financial Requirements203.1.2Regulatory Requirements203.1.3Organisational Requirements203.1.4Requirements for Performance Measurement213.2Requirements at a Glance224.Development Approach234.1Top-Down vs. Bottom-Up234.1.1Top-Down234.1.2Bottom-Up244.1.3Comparison264.2Development Approach chosen265.Findings295.1Top-Down Findings305.1.1Generic Security Model305.1.2Self-Assessment Guide315.1.3Findings and Discussion345.2Bottom-Up Findings365.2.1List of Key Figures365.2.2Relationships385.3Meet in the Middle395.4Discussion of Key Figures415.4.1Key Figures Definition Table415.4.2Application of Quality Criteria425.4.3Documentation of Key Figures436.Basic Management Report616.1Remarks616.2Proposed Key Figures61A.Incident Response Form63B.Project Management65B.1Project Plan65B.2Variance Comparison66C.Retrospective and Future Directions67D.Recommendations for IT-Based Performance Measurement69E.Bibliography71F.Glossary75.

Seller Inventory # 9783838667881

Bibliographic Details

• Title: Development of an IT-Security Performance Measurement System
• Publisher: Diplom.De
• Publication Date: 2003
• Language: German
• ISBN 10: 3838667883
• ISBN 13: 9783838667881
• Binding: Taschenbuch
• Condition: Neu
• Dimensions: 210W x 148H x 7D millimeters 210 millimeters width by 148 millimeters height by 7 millimeters depth
• Weight: 141 grams

About this title

Synopsis

Bachelorarbeit, die am 31.03.2003 erfolgreich an einer Fachhochschule in Deutschland eingereicht wurde. Abstract: Adequate security of information and the systems that process it is a fundamental management responsibility. Management must understand the