Modeling an international organization on information security management and IT security advanced aspects: Model, strategy and organization

Abstract

Now in these days the organizations are using advanced technologies for instance modern cloud, employees bringing their own device at work, use of social networks and resolving borderlines between private and company hours. This is because these technologies are very fast developing, and having flexible and smart features. It seems very clearly that social media have changed the life. For instance face book is often the preferred communication compared to calling on phone or sending email. In case of modern cloud providers fast access to various applications low infrastructural cost has been enabled. Furthermore BYOD enables employee owned devices at work for example smart phones, laptops, I-pads This thesis work is about to make an educational study platform for the future students related to concepts of modern cloud, BYOD and social media in the modern organizations. For the fulfillment of the author’s goal on this research, the author has followed qualitative and quantitative research methodologies. The author has completed his job by defining a case study named CKTECK for the future students. There author have described the BYOD, Cloud and Social media in the research work which will work as a learning tool for the students. Moreover, the author has described tasks on the topics of Risk Analysis, Information security policies, Risk management according to ISO 27001-27005 and ISACA standards. Meanwhile the author also provided some solutions to the tasks so that the students can take help from those. The main challenge was to define an open case study framework allowing innovative solutions of new security related threats in advanced technologies. The overall infrastructure of the organization depicts a realistic up to date environment allowing securing it in many dimensions, and presenting in a few cases advanced organizational solutions as well. This case study allows training and education of security management in a completely new and more realistic way, such that future students can work in realistic company like situations.