Interactive Selection of ISO 27001 Controls under Multiple Objectives

Abstract IT security incidents pose a major threat to the efficient execution of corporate strategies. Although, information security standards provide a holistic approach to mitigate these threats and legal acts demand their implementation, companies often refrain from the implementation of information security standards, especially due to high costs and the lack of evidence for a positive cost/benefit ratio. This paper presents a new approach that supports decision makers in interactively

• Type: Conference
• Year: 2008
• Where: SEC
• Authors: Thomas Neubauer, Andreas Ekelhart, Stefan Fenz
• Keywords: Information Security Standards, Positive Cost/benefit Ratio, SEC 2008, Security Incidents, Security Privacy