@inproceedings{HaufeColomoPalaciosDzombetaetal.2016, author = {Haufe, Knut and Colomo-Palacios, Ricardo and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir}, title = {ISMS core processes: a study}, series = {Procedia Computer Science}, volume = {100}, booktitle = {Procedia Computer Science}, pages = {339 -- 346}, year = {2016}, abstract = {Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and their mission. Actually a specific ISMS process framework which clearly differentiates between ISMS processes and security measures controlled by ISMS-processes does not exist. ISMS processes itself are not focused in current research. This article will fill this research gap while containing the results of a study to identify criteria for ISMS core processes as well as to identify relevant ISMS core processes.}, language = {en} } @inproceedings{HaufeColomoPalaciosDzombetaetal.2016, author = {Haufe, Knut and Colomo-Palacios, Ricardo and Dzombeta, Srdan and Brandis, Knud and Stantchev, Vladimir}, title = {Security Management Standards: A Mapping}, series = {Procedia Computer Science}, booktitle = {Procedia Computer Science}, url = {http://nbn-resolving.de/urn:nbn:de:0298-opus4-10513}, pages = {755 -- 761}, year = {2016}, abstract = {Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and its mission. As of today, a specific ISMS process framework does not exist. ISMS processes are not in focus of current research. This article aims to fill this research gap by presenting results of a process mapping study regarding ISMS processes in the most important and widely accepted international standards for Information Security Management. Authors propose a set of ISMS processes within an ISMS process framework which should be implemented at an individually appropriate maturity level.}, language = {en} }