TY - CHAP A1 - Haufe, Knut A1 - Colomo-Palacios, Ricardo A1 - Dzombeta, Srdan A1 - Brandis, Knud A1 - Stantchev, Vladimir T1 - Security Management Standards: A Mapping T2 - Procedia Computer Science N2 - Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and its mission. As of today, a specific ISMS process framework does not exist. ISMS processes are not in focus of current research. This article aims to fill this research gap by presenting results of a process mapping study regarding ISMS processes in the most important and widely accepted international standards for Information Security Management. Authors propose a set of ISMS processes within an ISMS process framework which should be implemented at an individually appropriate maturity level. KW - IT Governance KW - Information Security KW - Mapping Y1 - 2016 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:0298-opus4-10513 SP - 755 EP - 761 ER - TY - CHAP A1 - Haufe, Knut A1 - Colomo-Palacios, Ricardo A1 - Dzombeta, Srdan A1 - Brandis, Knud A1 - Stantchev, Vladimir T1 - ISMS core processes: a study T2 - Procedia Computer Science N2 - Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and their mission. Actually a specific ISMS process framework which clearly differentiates between ISMS processes and security measures controlled by ISMS-processes does not exist. ISMS processes itself are not focused in current research. This article will fill this research gap while containing the results of a study to identify criteria for ISMS core processes as well as to identify relevant ISMS core processes. KW - Information Security KW - IT Governance KW - Processes Y1 - 2016 N1 - Online: https://www.researchgate.net/publication/308984011_ISMS_Core_Processes_A_Study VL - 100 SP - 339 EP - 346 ER - TY - JOUR A1 - Petruch, Konstantin A1 - Stantchev, Vladimir A1 - Tamm, Gerrit T1 - A Survey on IT-Governance Aspects of Cloud Computing JF - International Journal of Web and Grid Services N2 - The purpose of this work is to provide a representative survey of current trends in the perception, assessment and adoption of cloud computing within the enterprise. Cloud computing can be regarded as the general principle for using and providing web and grid services. First, we provide a meta-study, where we evaluate existing and published empirical studies. Furthermore, we conduct and evaluate an own empirical study with a representative group of European and International enterprises. Key findings of the work include the significantly higher importance of Business Drivers for the adoption of cloud computing, as compared to Technical Drivers. KW - IT Governance KW - Cloud Computing KW - Web Services Management KW - Information Technology KW - Business Drivers Y1 - 2011 N1 - Online: https://www.researchgate.net/publication/220403226_A_survey_on_IT-governance_aspects_of_cloud_computing VL - 7 IS - 3 SP - 268 EP - 303 ER - TY - JOUR A1 - Stantchev, Vladimir A1 - Stantcheva, Lubomira T1 - Extending Traditional IT-Governance Knowledge Towards SOA and Cloud Governance JF - International Journal of Knowledge Society Research N2 - Enterprises today often strive to keep up with the paces of technological development. A particular case in point is the IT function where traditional governance approaches are often questioned by technology trends. Examples for such trends in the last ten years are the service-oriented architecture (SOA) and cloud computing. The introduction of SOA in the enterprise was one of the key enablers for cloud computing. Therefore, it can serve as a natural fit for bringing traditional IT governance approaches forward to the challenges of cloud governance. This article presents an approach for extending IT governance mindsets to the areas of SOA and cloud governance. It allows an IT organisation the adaptation and the continuous usage of already established governance knowledge and models during the adoption of cloud computing solutions. The authors also present an application case study where they demonstrate the feasibility of the approach in real-life scenarios in the context of an international telecommunication provider. KW - Cloud Governance KW - IT Governance KW - Knowledge Extension KW - SOA Governance KW - Technological Development Y1 - 2012 N1 - Online: https://www.researchgate.net/publication/269560351_Extending_Traditional_IT-Governance_Knowledge_Towards_SOA_and_Cloud_Governance VL - 3 IS - 2 SP - 30 EP - 43 ER - TY - JOUR A1 - Petruch, Konstantin A1 - Tamm, Gerrit A1 - Stantchev, Vladimir T1 - Deriving In-Depth Knowledge from IT-Performance Data Simulations JF - International Journal of Knowledge Society Research (IJKSR) N2 - Knowledge of behavioral patterns of a system can contribute to an optimized management and governance of the same system, or of similar systems. While human experience often manifests itself as intuition, intuition can be notoriously misleading, particularly in the case of quantitative data and subtle relations between different data sets. This article augments managerial intuition with knowledge derived from a specific byproduct of automated transaction processing performance and log data of the processing software. More specifically, the authors consider data generated by incident management and ticketing systems within IT support departments. The authors’ approach utilizes a rigorous analysis methodology based on System Dynamics. This allows for identifying real causalities and hidden dependencies between different datasets. The authors can then use them to derive and assemble knowledge bases for improved management and governance in this context. This approach is able to provide more in depth insights as compared to typical data visualization and dashboard techniques. In the experimental results section, the authors demonstrate the feasibility of the approach. It is applied on real life datasets and log files from an international telecommunication provider and considered different improvements in management and governance that result from it. KW - Cloud Governance KW - IT Governance KW - Knowledge Extension KW - Simulation KW - System Dynamics Y1 - 2012 N1 - Online: https://www.researchgate.net/publication/276183994_Deriving_In-Depth_Knowledge_from_IT-Performance_Data_Simulations VL - 3 IS - 2 SP - 13 EP - 29 ER - TY - CHAP A1 - Stantchev, Vladimir A1 - Tamm, Gerrit A1 - Petruch, Konstantin ED - Lytras, Miltiadis D. T1 - Simulation-Based IT Process Governance T2 - Communications in Computer and Information Science N2 - IT departments within enterprises often utilize incident management and ticketing systems. While performance data from such systems is often stored in logfiles it is rarely evaluated extensively. In this work we assess the applicability of an approach for extended evaluation of logged data from such systems. Our evaluation is focused on Key Performance Indicators (KPIs) and aims to discover more in-depth insights as compared to typical data visualization and dashboard techniques. We also present a practical case study where we demonstrate the feasibility of the approach using real-life logfiles from an international telecommunication provider. Our modeling methodology is based on the approach of System Dynamics. T3 - Communications in Computer and Information Science - 278/2 KW - Simulation KW - IT Processes KW - IT Governance KW - Incident Management Y1 - 2012 N1 - Online: https://www.researchgate.net/publication/286454680_Simulation-based_IT_process_governance VL - 278 SP - 206 EP - 215 PB - Springer CY - Berlin ER -