Establishment of Methods for Information Security System Policy Using Benchmarking

Authors

Martin Kang, University of MemphisFollow
Ted Lee, University of Memphis
Sungyong Um, National University of Singapore

Abstract

Benchmarking methodology can provide organizations with a way to choose an appropriate information security policy. However, selecting a proper organization as a benchmarking peer is a challenge due to the lack of quantitative methods for benchmarking. This paper proposes methods to select a peer organization by quantitatively measuring the similarity of organizations' InfoSec management systems.

Publication Title

Proceedings - 29th IEEE International Symposium on Software Reliability Engineering Workshops, ISSREW 2018

Recommended Citation

Kang, M., Lee, T., & Um, S. (2018). Establishment of Methods for Information Security System Policy Using Benchmarking. Proceedings - 29th IEEE International Symposium on Software Reliability Engineering Workshops, ISSREW 2018, 237-242. https://doi.org/10.1109/ISSREW.2018.00012