2026-09-19T13:48:01Zhttps://dspace.mit.edu/server/oai/request

oai:dspace.mit.edu:1721.1/675682026-06-06T01:05:15Zcom_1721.1_7582com_1721.1_7581col_1721.1_131023

Michael Cusumano. Sharma, Dhirendra, S.M. Massachusetts Institute of Technology System Design and Management Program. System Design and Management Program. Massachusetts Institute of Technology. Engineering Systems Division 2011-12-09T21:25:42Z 2011-12-09T21:25:42Z 2011 2011 http://hdl.handle.net/1721.1/67568 761731123 Thesis (S.M. in Engineering and Management)--Massachusetts Institute of Technology, Engineering Systems Division, System Design and Management Program, 2011. Cataloged from PDF version of thesis. Includes bibliographical references (p. 124-130). There are several technological solutions available in the market to help organizations with information security breach detection and prevention such as intrusion detection and prevention systems, antivirus software, firewalls, and spam filters. There is no doubt in the fact that significant progress has been made in the technological side of information security. However, when we study causes of information security breaches, we find that a significant number are caused by non-technical reasons such as social engineering, theft of computing device or portable hard drive, human behavior, and human error. This leads us to conclude that information security should not be viewed through technology perspective only. Instead, a more holistic approach is required. This thesis provides a systems approach towards information security management and include technological, management and social aspects. This thesis starts with introduction especially background and motivation of the author, followed by literature research. Next, Enterprise Information Security Management Framework is presented leading to estimation of an organization's information security management maturity-level. Finally, conclusion and potential future work are presented. by Dhirendra Sharma. S.M. in Engineering and Management 130 p. eng Massachusetts Institute of Technology M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission. http://dspace.mit.edu/handle/1721.1/7582 Engineering Systems Division. System Design and Management Program. Enterprise Information Security Management Framework [EISMF] EISMF Thesis application/pdf Publication unknown unknown <Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="f8664fd7-6d9a-48d8-b64b-a8e95e090f68"> <Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type> <Language>eng</Language> <Title>Enterprise Information Security Management Framework [EISMF]</Title> <Subtitle>EISMF</Subtitle> <PublishedIn> <Publication> </Publication> </PublishedIn> <PublicationDate>2011</PublicationDate> <Authors> <Author> <DisplayName>Sharma, Dhirendra, S.M. Massachusetts Institute of Technology</DisplayName> <Affiliation> <OrgUnit> </OrgUnit> </Affiliation> </Author> </Authors> <Editors> </Editors> <Publishers> <Publisher> <DisplayName>Massachusetts Institute of Technology</DisplayName> <OrgUnit /> </Publisher> </Publishers> <License>http://dspace.mit.edu/handle/1721.1/7582</License> <Keyword>Engineering Systems Division.</Keyword> <Keyword>System Design and Management Program.</Keyword> <Abstract>There are several technological solutions available in the market to help organizations with information security breach detection and prevention such as intrusion detection and prevention systems, antivirus software, firewalls, and spam filters. There is no doubt in the fact that significant progress has been made in the technological side of information security. However, when we study causes of information security breaches, we find that a significant number are caused by non-technical reasons such as social engineering, theft of computing device or portable hard drive, human behavior, and human error. This leads us to conclude that information security should not be viewed through technology perspective only. Instead, a more holistic approach is required. This thesis provides a systems approach towards information security management and include technological, management and social aspects. This thesis starts with introduction especially background and motivation of the author, followed by literature research. Next, Enterprise Information Security Management Framework is presented leading to estimation of an organization&apos;s information security management maturity-level. Finally, conclusion and potential future work are presented.</Abstract> <Access xmlns="http://purl.org/coar/access_right" > </Access> </Publication>