: The paper contains presentation of a framework, which would significantly increase quality of information security products and procedures, and Commentary on difficulties of implementing such a model. Main idea behind the framework is creation of a body assessing quality of information security products and procedures, similar to the system the ISO 9000 certificates. Key words: Information security management, quality assurance, security benchmarks
Lech J. Janczewski, Andrew M. Colarik