INFORMATION SYSTEM SECURITY EVALUATION USING COBIT 5 FRAMEWORK
نویسندگان
چکیده
Most companies use information technology to develop their business. But there are things note, some threats can occur and cause losses. Undesirable events hinder the achievement of company goals strategies. PT XYZ believes that security is important in all business activities. Threats compromise security. Information an asset for XYZ. Therefore, it necessary evaluate or measure controls activities have been implemented protect data/information. Evaluation this paper uses COBIT 5 Framework which focuses on Manage Security Services (DSS05). Keywords: Evaluation, 5, Services, Capability Level
منابع مشابه
CAT5:A Tool for Measuring the Maturity Level of Information Technology Governance Using COBIT 5 Framework
Companies have more and more trends to automate their operational and organizational activities, therefore the investment of information technology (IT) continues to increase every year. However, good governance that can ensure the alignment of IT and business strategy and realized benefits from IT investments has not always followed this increase. Measurement of IT governance is then required ...
متن کاملInformation Security governance: COBIT or ISO 17799 or both?
This paper investigates the coexistence of and complementary use of COBIT and ISO 17799 as reference frameworks for Information Security governance. The investigation is based on a mapping between COBIT and ISO 17799 which became available in 2004, and provides a level of 'synchronization' between these two frameworks.
متن کاملGoverning Information Security in Conjunction with COBIT and ISO 27001
In this paper, after giving a brief definition of Information Security Management Systems (ISMS), ISO 27001, IT governance and COBIT, pros and cons of implementing only COBIT, implementing only IS
متن کاملChallenges of CoBIT 5 IT Governance Framework Migration
As information technology (IT) persists as an integral means for achieving success in organisational business processes, IT Governance (ITG) continues to be a top priority too. Current reports show that enterprises continue to suffer financial losses as a result of poor ITG practices. To better govern IT resources, many have tried to address this problem by migrating to the highly recommended I...
متن کاملStandardization of Information Security Management System: ISO/IEC 27001: 2005, ITIL®, CoBIT®
Information is currently the most important asset of modern companies. Its security is therefore very important and becomes the top priority of each company. Unfortunately, there is no simple recipe providing 100 % security of information. A company must apply the best security procedures with the aim to achieve an appropriate level of its information security. This paper presents and compares ...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Journal of Information System Management
سال: 2023
ISSN: ['2715-3088']
DOI: https://doi.org/10.24076/joism.2023v4i2.992