DMCA
THE ORGANISATIONAL INFORMATION SECURITY PROFILE- A TOOL TO ASSIST THE BOARD –
BibTeX
@MISC{Tyukala_theorganisational,
author = {Mkhululi Tyukala and Dalenca Pottas and Helen Van De Haar and Rossouw Von Solms},
title = {THE ORGANISATIONAL INFORMATION SECURITY PROFILE- A TOOL TO ASSIST THE BOARD –},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
What does the senior management of an organisation do when the board of directors asks, “show us that the organisation’s information security policy is implemented and maintained properly”? Such a question is likely to be asked as part of the board’s effort to show that it has met its obligations in terms of due diligence. This paper introduces a framework to facilitate the governing of information security in an organisation. The framework defines the concept of an organisational information security profile (OISP), the role of which is to retain and measure the level of efficiency of information security and inform the board accordingly. The paper discusses the OISP and each of its major building blocks. Each building block and its role are explained in detail. Ultimately the OISP will show how the information security of an organisation has been implemented based on the information security policy of the organisation and the changes that have taken place over time, therefore pointing out areas that need immediate attention.
