Using Security Requirements Engineering Approaches to Support ISO 27001 Information Security Management Systems Development and Documentation
- An ISO 27001 compliant information security management system is difficult to create, due to the the limited support for system development and documentation provided in the standard. We present a structured analysis of the documentation and development requirements in the ISO 27001 standard. Moreover, we investigate to what extent existing security requirements engineering approaches fulfill these requirements. We developed relations between these approaches and the ISO 27001 standard using a conceptual framework originally developed for comparing security requirements engineering methods. The relations include comparisons of important terms, techniques, and documentation artifacts. In addition, we show practical applications of our results.
Author: | Kristian Beckers, Stephan Faßbender, Maritta Heisel, Holger Schmidt |
---|---|
Fachbereich/Einrichtung: | Hochschule Düsseldorf / Fachbereich - Medien |
Hochschule Düsseldorf / Fachbereich - Medien / Digitale Vernetzung und Informationssicherheit | |
Document Type: | Conference Proceeding |
Year of Completion: | 2012 |
Language of Publication: | English |
Publisher: | IEEE |
Place of publication: | Prague |
Parent Title (English): | 2012 Seventh International Conference on Availability, Reliability and Security |
First Page: | 242 |
Last Page: | 248 |
Related URL: | https://ieeexplore.ieee.org/document/6329189 |
DOI: | https://doi.org/10.1109/ARES.2012.35 |
ISBN: | 978-1-4673-2244-7 |
Licence (German): | keine Lizenz - nur Metadaten |
Release Date: | 2018/10/09 |