Skip to main content

2016 | OriginalPaper | Buchkapitel

Formation of the Instantaneous Information Security Audit Concept

verfasst von : I. I. Livshitz, D. V. Yurkin, A. A. Minyaev

Erschienen in: Distributed Computer and Communication Networks

Verlag: Springer International Publishing

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

This publication covers the problem of formation the concept of the instantaneous information security (IT-Security) audits, including protection against zero-day threats. Various recent materials are presented to the actual problem of counter zero-day threats notes that “any process-driven people, is unreliable. In this situation it is proposed to use not only a technical methods to counter zero-day threats, but to offer a combined method based on the concept of instantaneous IT-Security audits. Methodological basis of this concept for instantaneous audits defined both ISO 27001 and ISO 19011 standards, which extended with the set of IT-security metrics for quantify the object protection level. In the example for one variable was demonstrated an increase in the rate of growth of the ISMS level variables with known IT-Security audits process.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literatur
1.
Zurück zum Zitat ISO/IEC 27001:2013. Information technology. Security techniques. Information security management systems. Requirements, International Organization for Standardization, 23 p. (2013) ISO/IEC 27001:2013. Information technology. Security techniques. Information security management systems. Requirements, International Organization for Standardization, 23 p. (2013)
2.
Zurück zum Zitat ISO/IEC 27000:2014. Information technology. Security techniques. Information security management systems. Overview and vocabulary, International Organization for Standardization, 31 p. (2014) ISO/IEC 27000:2014. Information technology. Security techniques. Information security management systems. Overview and vocabulary, International Organization for Standardization, 31 p. (2014)
3.
Zurück zum Zitat ISO/IEC 27004:2009. Information technology. Security techniques. Information security management systems. Measurement, International Organization for Standardization, 55 p. (2009) ISO/IEC 27004:2009. Information technology. Security techniques. Information security management systems. Measurement, International Organization for Standardization, 55 p. (2009)
4.
Zurück zum Zitat ISO 19011:2011. Guidelines for auditing management systems, 44 p. (2011) ISO 19011:2011. Guidelines for auditing management systems, 44 p. (2011)
5.
Zurück zum Zitat ISO 17021:2015. Conformity assessment – Requirements for bodies providing audit and certification of management systems, 48 p. (2015) ISO 17021:2015. Conformity assessment – Requirements for bodies providing audit and certification of management systems, 48 p. (2015)
6.
Zurück zum Zitat ISO 55000:2014. Asset management – Overview, principles and terminology. International Organization for Standardization, 19 p. (2014) ISO 55000:2014. Asset management – Overview, principles and terminology. International Organization for Standardization, 19 p. (2014)
7.
Zurück zum Zitat ISO 55001:2014. Asset management – Management systems – Requirements. International Organization for Standardization, 14 p. (2014) ISO 55001:2014. Asset management – Management systems – Requirements. International Organization for Standardization, 14 p. (2014)
8.
Zurück zum Zitat ISO 55002:2014. Asset management – Management systems – Guidelines for the application of ISO 55001. International Organization for Standardization, 32 p. (2014) ISO 55002:2014. Asset management – Management systems – Guidelines for the application of ISO 55001. International Organization for Standardization, 32 p. (2014)
9.
Zurück zum Zitat PAS-99:2012. Specification of common management system requirements as a framework for integration, 36 p. (2012) PAS-99:2012. Specification of common management system requirements as a framework for integration, 36 p. (2012)
10.
Zurück zum Zitat Livshitz, I.: Joint problem solving information security audit and ensure the availability of information systems based on the requirements of international standards BSI/ISO M. Informatisatia i Svyaz 6, 67–62 (2013) Livshitz, I.: Joint problem solving information security audit and ensure the availability of information systems based on the requirements of international standards BSI/ISO M. Informatisatia i Svyaz 6, 67–62 (2013)
11.
Zurück zum Zitat Livshitz, I.: Practical purpose methods for ISMS evaluation. M. Quality Manage. 1, 22–34 (2013) Livshitz, I.: Practical purpose methods for ISMS evaluation. M. Quality Manage. 1, 22–34 (2013)
12.
Zurück zum Zitat Livshitz, I.: The Application of ISMS models to evaluate the security of Integrated Management Systems. In: Proceedings of SPIIRAS, vol. 8, pp. 147–162 (2013) Livshitz, I.: The Application of ISMS models to evaluate the security of Integrated Management Systems. In: Proceedings of SPIIRAS, vol. 8, pp. 147–162 (2013)
13.
Zurück zum Zitat Livshits, I., Polishchuk, V.: A practical evaluation of ISMS effectiveness in accordance with the requirements of the various systems of standardization – ISO 27001 and STO Gazprom. In: Proceedings of SPIIRAS, vol. 3, pp. 33–44 (2015) Livshits, I., Polishchuk, V.: A practical evaluation of ISMS effectiveness in accordance with the requirements of the various systems of standardization – ISO 27001 and STO Gazprom. In: Proceedings of SPIIRAS, vol. 3, pp. 33–44 (2015)
Metadaten
Titel
Formation of the Instantaneous Information Security Audit Concept
verfasst von
I. I. Livshitz
D. V. Yurkin
A. A. Minyaev
Copyright-Jahr
2016
DOI
https://doi.org/10.1007/978-3-319-51917-3_28