PROJECT TITLE :

A Framework for Information Security Governance and Management

ABSTRACT:

Daily changes in the knowledge security landscape mean that organizations face unprecedented challenges in securing their data systems. It seems simple for organizations to adopt a tactical approach in which they reply to problems as they occur. But, when such a paradigm exists, it becomes difficult to act strategically. What is required is for organizations to be in a position to assess their current maturity state with respect to data security governance and management, and to proactively identify drawback areas that need to be addressed. Here, the authors present a capability maturity framework to support organizations during this activity. The framework addresses the technical, process, and human aspects of knowledge security and provides insight and guidelines for organizations to implement effective data security governance and management processes.