Modeling an international organization on information security management and IT security advanced aspects: Model, strategy and organization
Master thesis
Permanent lenke
http://hdl.handle.net/11250/144034Utgivelsesdato
2013Metadata
Vis full innførselSamlinger
Sammendrag
Now in these days the organizations are using advanced technologies for instance modern cloud,
employees bringing their own device at work, use of social networks and resolving borderlines
between private and company hours. This is because these technologies are very fast developing,
and having flexible and smart features. It seems very clearly that social media have changed
the life. For instance face book is often the preferred communication compared to calling on
phone or sending email. In case of modern cloud providers fast access to various applications
low infrastructural cost has been enabled. Furthermore BYOD enables employee owned devices
at work for example smart phones, laptops, I-pads
This thesis work is about to make an educational study platform for the future students related
to concepts of modern cloud, BYOD and social media in the modern organizations. For the fulfillment
of the author’s goal on this research, the author has followed qualitative and quantitative
research methodologies. The author has completed his job by defining a case study named CKTECK
for the future students. There author have described the BYOD, Cloud and Social media in
the research work which will work as a learning tool for the students. Moreover, the author has
described tasks on the topics of Risk Analysis, Information security policies, Risk management
according to ISO 27001-27005 and ISACA standards. Meanwhile the author also provided some
solutions to the tasks so that the students can take help from those.
The main challenge was to define an open case study framework allowing innovative solutions
of new security related threats in advanced technologies. The overall infrastructure of the organization
depicts a realistic up to date environment allowing securing it in many dimensions,
and presenting in a few cases advanced organizational solutions as well. This case study allows
training and education of security management in a completely new and more realistic way, such
that future students can work in realistic company like situations.