@inproceedings{HaufeColomoPalaciosDzombetaetal.2016, author = {Haufe, Knut and Colomo-Palacios, Ricardo and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir}, title = {Security Management Standards: A Mapping}, series = {Procedia Computer Science}, booktitle = {Procedia Computer Science}, url = {http://nbn-resolving.de/urn:nbn:de:0298-opus4-10513}, pages = {755 -- 761}, year = {2016}, abstract = {Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and its mission. As of today, a specific ISMS process framework does not exist. ISMS processes are not in focus of current research. This article aims to fill this research gap by presenting results of a process mapping study regarding ISMS processes in the most important and widely accepted international standards for Information Security Management. Authors propose a set of ISMS processes within an ISMS process framework which should be implemented at an individually appropriate maturity level.}, language = {en} } @inproceedings{HaufeColomoPalaciosDzombetaetal.2016, author = {Haufe, Knut and Colomo-Palacios, Ricardo and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir}, title = {ISMS core processes: a study}, series = {Procedia Computer Science}, volume = {100}, booktitle = {Procedia Computer Science}, pages = {339 -- 346}, year = {2016}, abstract = {Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and their mission. Actually a specific ISMS process framework which clearly differentiates between ISMS processes and security measures controlled by ISMS-processes does not exist. ISMS processes itself are not focused in current research. This article will fill this research gap while containing the results of a study to identify criteria for ISMS core processes as well as to identify relevant ISMS core processes.}, language = {en} } @article{PetruchStantchevTamm2011, author = {Petruch, Konstantin and Stantchev, Vladimir and Tamm, Gerrit}, title = {A Survey on IT-Governance Aspects of Cloud Computing}, series = {International Journal of Web and Grid Services}, volume = {7}, journal = {International Journal of Web and Grid Services}, number = {3}, pages = {268 -- 303}, year = {2011}, abstract = {The purpose of this work is to provide a representative survey of current trends in the perception, assessment and adoption of cloud computing within the enterprise. Cloud computing can be regarded as the general principle for using and providing web and grid services. First, we provide a meta-study, where we evaluate existing and published empirical studies. Furthermore, we conduct and evaluate an own empirical study with a representative group of European and International enterprises. Key findings of the work include the significantly higher importance of Business Drivers for the adoption of cloud computing, as compared to Technical Drivers.}, language = {en} } @article{StantchevStantcheva2012, author = {Stantchev, Vladimir and Stantcheva, Lubomira}, title = {Extending Traditional IT-Governance Knowledge Towards SOA and Cloud Governance}, series = {International Journal of Knowledge Society Research}, volume = {3}, journal = {International Journal of Knowledge Society Research}, number = {2}, pages = {30 -- 43}, year = {2012}, abstract = {Enterprises today often strive to keep up with the paces of technological development. A particular case in point is the IT function where traditional governance approaches are often questioned by technology trends. Examples for such trends in the last ten years are the service-oriented architecture (SOA) and cloud computing. The introduction of SOA in the enterprise was one of the key enablers for cloud computing. Therefore, it can serve as a natural fit for bringing traditional IT governance approaches forward to the challenges of cloud governance. This article presents an approach for extending IT governance mindsets to the areas of SOA and cloud governance. It allows an IT organisation the adaptation and the continuous usage of already established governance knowledge and models during the adoption of cloud computing solutions. The authors also present an application case study where they demonstrate the feasibility of the approach in real-life scenarios in the context of an international telecommunication provider.}, language = {en} } @article{PetruchTammStantchev2012, author = {Petruch, Konstantin and Tamm, Gerrit and Stantchev, Vladimir}, title = {Deriving In-Depth Knowledge from IT-Performance Data Simulations}, series = {International Journal of Knowledge Society Research (IJKSR)}, volume = {3}, journal = {International Journal of Knowledge Society Research (IJKSR)}, number = {2}, pages = {13 -- 29}, year = {2012}, abstract = {Knowledge of behavioral patterns of a system can contribute to an optimized management and governance of the same system, or of similar systems. While human experience often manifests itself as intuition, intuition can be notoriously misleading, particularly in the case of quantitative data and subtle relations between different data sets. This article augments managerial intuition with knowledge derived from a specific byproduct of automated transaction processing performance and log data of the processing software. More specifically, the authors consider data generated by incident management and ticketing systems within IT support departments. The authors' approach utilizes a rigorous analysis methodology based on System Dynamics. This allows for identifying real causalities and hidden dependencies between different datasets. The authors can then use them to derive and assemble knowledge bases for improved management and governance in this context. This approach is able to provide more in depth insights as compared to typical data visualization and dashboard techniques. In the experimental results section, the authors demonstrate the feasibility of the approach. It is applied on real life datasets and log files from an international telecommunication provider and considered different improvements in management and governance that result from it.}, language = {en} } @incollection{StantchevTammPetruch2012, author = {Stantchev, Vladimir and Tamm, Gerrit and Petruch, Konstantin}, title = {Simulation-Based IT Process Governance}, series = {Communications in Computer and Information Science}, volume = {278}, booktitle = {Communications in Computer and Information Science}, editor = {Lytras, Miltiadis D.}, publisher = {Springer}, address = {Berlin}, publisher = {SRH Berlin University of Applied Sciences}, pages = {206 -- 215}, year = {2012}, abstract = {IT departments within enterprises often utilize incident management and ticketing systems. While performance data from such systems is often stored in logfiles it is rarely evaluated extensively. In this work we assess the applicability of an approach for extended evaluation of logged data from such systems. Our evaluation is focused on Key Performance Indicators (KPIs) and aims to discover more in-depth insights as compared to typical data visualization and dashboard techniques. We also present a practical case study where we demonstrate the feasibility of the approach using real-life logfiles from an international telecommunication provider. Our modeling methodology is based on the approach of System Dynamics.}, language = {en} }