Enterprise Information Security Management Framework [EISMF]
Name
761731123-MIT.pdf
Description
Full printable version
Size
18.81 MB
Format
Adobe PDF
Checksum (MD5)
762d412d51cd308d482501eaca33cdaa
Author(s)
Sharma, Dhirendra, S.M. Massachusetts Institute of Technology
Advisor(s)
Michael Cusumano.
Alternative Title
EISMF
Date Issued
2011
Publisher
Massachusetts Institute of Technology
Abstract
There are several technological solutions available in the market to help organizations with information security breach detection and prevention such as intrusion detection and prevention systems, antivirus software, firewalls, and spam filters. There is no doubt in the fact that significant progress has been made in the technological side of information security. However, when we study causes of information security breaches, we find that a significant number are caused by non-technical reasons such as social engineering, theft of computing device or portable hard drive, human behavior, and human error. This leads us to conclude that information security should not be viewed through technology perspective only. Instead, a more holistic approach is required. This thesis provides a systems approach towards information security management and include technological, management and social aspects. This thesis starts with introduction especially background and motivation of the author, followed by literature research. Next, Enterprise Information Security Management Framework is presented leading to estimation of an organization's information security management maturity-level. Finally, conclusion and potential future work are presented.
Description
Thesis (S.M. in Engineering and Management)--Massachusetts Institute of Technology, Engineering Systems Division, System Design and Management Program, 2011.
Cataloged from PDF version of thesis.
Includes bibliographical references (p. 124-130).
Subjects
Engineering Systems Division.
System Design and Management Program.
MIT Department
System Design and Management Program.
Massachusetts Institute of Technology. Engineering Systems Division
Terms of Use
M.I.T. theses are protected by
copyright. They may be viewed from this source for any purpose, but
reproduction or distribution in any format is prohibited without written
permission. See provided URL for inquiries about permission.
copyright. They may be viewed from this source for any purpose, but
reproduction or distribution in any format is prohibited without written
permission. See provided URL for inquiries about permission.
Persistent DSpace Link
