Policy Engineering for Security Management of Organization Information Systems

Security management of information systems is a complex and daunting task in most organizations. Management policies are then introduced to guide and control the management of information systems, but the management of management policies is also a complex task. Therefore, we propose a new concept—policy engineering, which uses the philosophy and paradigms of established engineering disciplines to address these problems. The introduction of policy engineering will provide a systematic methodology that can be used to guide and control the management of information systems.