TY - JOUR A1 - Haufe, Knut A1 - Dzombeta, Srdan A1 - Brandis, Knud A1 - Stantchev, Vladimir A1 - Colomo-Palacios, Ricardo T1 - Improving Transparency and Efficiency in IT Security Management Resourcing JF - IT Professional N2 - The authors propose a resource management process for information security management systems to more transparently plan and assign costs of controls. The process relies on and is compliant with international standards of the ISO/IEC 27000 family and can be implemented by all organizations regardless of type, size, or nature. KW - Process control KW - Information security KW - IEC Standards KW - ISO Standards KW - Resource management Y1 - 2018 SN - 1520-9202 N1 - Volltext aus urheberrechtlichen Gründen nicht verfügbar. Full text due to copyright not available. VL - 20 IS - 01 SP - 53 EP - 62 ER - TY - JOUR A1 - Dzombeta, Srdan A1 - Stantchev, Vladimir A1 - Colomo-Palacios, Ricardo A1 - Brandis, Knud A1 - Haufe, Knut T1 - Governance of Cloud Computing Services for the Life Sciences JF - IT Professional N2 - This analysis of the legal regulations for cloud computing in healthcare is based on the authors’ expertise in cloud-based data processing for healthcare and life sciences organizations. The proposed implementation roadmap should help organizations govern health data processing and storage. Y1 - 2014 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:0298-opus4-5908 VL - 16 IS - 4 SP - 2 EP - 9 ER - TY - CHAP A1 - Haufe, Knut A1 - Colomo-Palacios, Ricardo A1 - Dzombeta, Srdan A1 - Brandis, Knud A1 - Stantchev, Vladimir T1 - Security Management Standards: A Mapping T2 - Procedia Computer Science N2 - Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and its mission. As of today, a specific ISMS process framework does not exist. ISMS processes are not in focus of current research. This article aims to fill this research gap by presenting results of a process mapping study regarding ISMS processes in the most important and widely accepted international standards for Information Security Management. Authors propose a set of ISMS processes within an ISMS process framework which should be implemented at an individually appropriate maturity level. KW - IT Governance KW - Information Security KW - Mapping Y1 - 2016 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:0298-opus4-10513 SP - 755 EP - 761 ER - TY - CHAP A1 - Haufe, Knut A1 - Colomo-Palacios, Ricardo A1 - Dzombeta, Srdan A1 - Brandis, Knud A1 - Stantchev, Vladimir T1 - ISMS core processes: a study T2 - Procedia Computer Science N2 - Adjustment and cost-effectiveness are key elements of a successful Information Security Management System (ISMS). ISMS-Processes, as basic elements of every ISMS, need to be aligned to the organization and their mission. Actually a specific ISMS process framework which clearly differentiates between ISMS processes and security measures controlled by ISMS-processes does not exist. ISMS processes itself are not focused in current research. This article will fill this research gap while containing the results of a study to identify criteria for ISMS core processes as well as to identify relevant ISMS core processes. KW - Information Security KW - IT Governance KW - Processes Y1 - 2016 N1 - Online: https://www.researchgate.net/publication/308984011_ISMS_Core_Processes_A_Study VL - 100 SP - 339 EP - 346 ER -