Introduction of a Tool-Based Continuous Information Security Management System: An Exploratory Case Study

摘要: Tighter regulatory demands and higher customer expectations regarding the protection of information force enterprises to systematically ensure confidentiality, integrity availability stored processing facilities. Information Security Management Systems (ISMSs) are used address these challenges. Recent studies show that majority companies plans establish at least basic security management prepare for future developments. Larger have already embraced ISMSs, whereas small medium-sized (SMEs) catching up require support in defining, introducing operating them. We developed ADAMANT, an SME-friendly tool supports continuous incorporating stakeholders different domains. In this paper, we evaluated our approach introduce ISMS SMEs using introductory training. The evaluation shows improves critical tasks. Furthermore, integrating ADAMANT customized trainings allows directly use training results implement ISMS.