ranking the barriers of implementing information security management system and investigation of readiness rate of exploration management

as information has the role of organization asset, its protection is the key to the survival of any organization. information security management system (isms) defines protection of information in three specific concepts: information confidentiality, accuracy, and availability. many failures in implementing isms rooted in organizational problems and lack of attention to the state of readiness of the organization before implementation. a descriptive design (method) was used to perform the study. barriers to implementing isms were ranked based on analytical hierarchical process and organization’s readiness rate to implement isms was determined by questionnaire. the results indicate that the non-compliance of organizational structure with the isms requirements is the most important barrier and employee’s fear of difficulties of these processes is lowest important barrier. in addition, the readiness rate of exploration management in the isms implementation is lower than average.