AN ANALYSIS OF SOFTWARE SUPPORTABLE TASKS IN INFORMATION SECURITY MANAGEMENT SYSTEM LIFE CYCLE PROCESSES
Ahmad Iqbal, Ahmad Iqbal Hakim Suhaimi, Yuichi Goto, Jingde Cheng · 2013
Secure management of information is becoming critical for any organization because information is one of the most valuable assets in organization’s business operations. Today, many organizations adopt information security management systems (ISMSs) to help them manage their information securely. However, ISMS is a complex management system which requires involvement of wide range of participants to perform a quite number of tasks as well as a number of documents. Furthermore, ISMS needed to be periodically reviewed and maintained to achieve continuous improvement. Consequently, it is difficult to do all tasks in ISMS without any support tools. However, there is no study to identify which tasks related with ISMS can be supported by software tools. Indeed, no one makes clear what tasks and participants exist in ISMS life cycle processes. This paper presents the first analysis to identify software supportable tasks in ISMS life cycle processes. The paper enumerates all participants, documents, and tasks, and shows relationship among them, and identifies all software supportable tasks. The analysis and its result becomes a basis to construct an engineering environment for supporting organizations to implement and maintain their ISMSs.