지원사업
학술연구/단체지원/교육 등 연구자 활동을 지속하도록 DBpia가 지원하고 있어요.
커뮤니티
연구자들이 자신의 연구와 전문성을 널리 알리고, 새로운 협력의 기회를 만들 수 있는 네트워킹 공간이에요.
논문 기본 정보
- 자료유형
- 학술저널
- 저자정보
- 저널정보
- 한국데이터전략학회 Journal of Information Technology Applications & Management Journal of Information Technology Applications & Management Vol.26 No.5
- 발행연도
- 2019.10
- 수록면
- 13 - 25 (13page)
이용수
초록· 키워드
오류제보하기
Recently, as evaluation of information security (IS) management become more diverse and complicated, the contents and procedure of the evidence to prepare for actual assessment are rapidly increasing. As a result, the actual assessment is a burden for both evaluation agencies and institutions receiving assessments. However, most of them reflect the evaluation system used by foreign government agencies, standard organizations, and commercial companies. It is necessary to consider the evaluation system suitable for the domestic environment instead of reflecting the overseas evaluation system as it is.
The purpose of this study is as follows. First, we will present the problems of the existing information security assessment system and the improvement direction of the information security assessment system through analysis of existing information security assessment system. Second, it analyzes the technical guidance for information security testing and assessment and the evaluation of information security management in the Special Publication 800-115 "Technical Guide to Information Security Testing and Assessment" of the National Institute of Standards and Technology (NIST). Third, we will build a framework to implement the evidence collection system and present a system implementation method for the ‘6. Information System Security’ of ‘information security management actual condition evaluation index’.
The implications of the framework development through this study are as follows. It can be expected that the security status of the enterprises will be improved by constructing the evidence collection system that can collect the collected evidence from the existing situation assessment. In addition, it is possible to systematically assess the actual status of information security through the establishment of the evidence collection system and to improve the efficiency of the evaluation. Therefore, the management system for evaluating the actual situation can reduce the work burden and improve the efficiency of evaluation.
The purpose of this study is as follows. First, we will present the problems of the existing information security assessment system and the improvement direction of the information security assessment system through analysis of existing information security assessment system. Second, it analyzes the technical guidance for information security testing and assessment and the evaluation of information security management in the Special Publication 800-115 "Technical Guide to Information Security Testing and Assessment" of the National Institute of Standards and Technology (NIST). Third, we will build a framework to implement the evidence collection system and present a system implementation method for the ‘6. Information System Security’ of ‘information security management actual condition evaluation index’.
The implications of the framework development through this study are as follows. It can be expected that the security status of the enterprises will be improved by constructing the evidence collection system that can collect the collected evidence from the existing situation assessment. In addition, it is possible to systematically assess the actual status of information security through the establishment of the evidence collection system and to improve the efficiency of the evaluation. Therefore, the management system for evaluating the actual situation can reduce the work burden and improve the efficiency of evaluation.
목차
Abstract
1. Introduction
2. Analysis of Existing Information Security Situation
3. Evidence Collection System Framework Overview
4. Framework Analysis: Step-by-Step
5. System Implementation Method by Security Item of Information System
6. Conclusion
References
참고문헌 (11)
참고문헌 신청
Bahsi, H. / 2017 / Analysis of National Cyber Situational Awareness Practices / Strategic Cyber Defense: A Multidisciplinary Perspective 48:31~41
FIPS / 2004 / PUB 199, ‘Standards for Security Categorization of Federal Information and Information Systems’
FISMA / Section 3544
Gikas, C. / 2010 / AGeneral Comparison of FISMA, HIPAA, ISO 27000 and PCI-DSS Standards / Information Security Journal: A Global Perspective 19(3):132~141
Hulitt, E. / 2010 / Information system security compliance to FISMA standard : a quantitative measure / Telecommunication Systems 45(2-3):139~152
FIPS / 2004 / PUB 199, ‘Standards for Security Categorization of Federal Information and Information Systems’
FISMA / Section 3544
Gikas, C. / 2010 / AGeneral Comparison of FISMA, HIPAA, ISO 27000 and PCI-DSS Standards / Information Security Journal: A Global Perspective 19(3):132~141
Hulitt, E. / 2010 / Information system security compliance to FISMA standard : a quantitative measure / Telecommunication Systems 45(2-3):139~152
함께 읽어보면 좋을 논문
논문 유사도에 따라 DBpia 가 추천하는 논문입니다. 함께 보면 좋을 연관 논문을 확인해보세요!
-
A Continuous Evaluation Processes for Information Security Management
Journal of Information Technology Applications & Management
2016 .09
-
정보보안 대책의 인식수준에 대한 연구 : 경영진과 비경영진 간의 차이를 중심으로
한국서비스경영학회 학술대회
2016 .11
-
조직구성원이 지각하는 기업 정보보안 관리에 대한 신뢰 형성 요인
인터넷전자상거래연구
2015 .08
-
조직 정보보호성과에 영향을 미치는 정보보호담당임원의 내 · 외적 특성
Journal of Information Technology Applications & Management
2020 .08
-
정보보호 교육이 청소년의 정보보호 실천에 미치는 영향
Journal of Information Technology Applications & Management
2019 .04
-
기업의 정보보호 공시가 기업가치에 미치는 영향
지식경영연구
2019 .01
-
인간의 요소에 초점을 맞춘 정보 보안 전략 탐색
교양학연구
2017 .12
-
정보보호 기술분야에서의 국가 기술수준 평가방법 및 비교실증 연구
한국경영과학회 학술대회논문집
2015 .04
-
은행 IT 인력의 정보보호 정책 준수에 영향을 미치는 정보보호 대책에 관한 연구
Journal of Information Technology Applications & Management
2015 .06
-
금융회사 정보보안정책의 위반에 영향을 주는 요인 연구 : 지각된 고객정보 민감도에 따른 조절효과
Journal of Information Technology Applications & Management
2015 .12
-
공공부문 정보보안 행태에 미치는 영향요인 : 정보보안의식의 매개효과를 중심으로
한국행정연구
2021 .01
-
보안경제성 연구동향 분석 : IS 저널 중심으로
Journal of Information Technology Applications & Management
2016 .03
-
정보보호 인식 및 정보보호 행동에 기반한 인터넷 이용자 유형화: TDA 분석방법론을 적용하여
경영연구
2023 .05
-
Conceptualizing and Framing Economic Security?: The Case of 30 Year Russian?Korean Security Relations Tested
The Korean Journal of Defense Analysis
2021 .01
-
기업의 정보보호 인증이 기업가치에 미치는 영향
한국IT서비스학회지
2016 .01
-
식량안보 중심의 신흥안보와 지속가능발전목표(SDGs) 간 연계성 분석
국가안보와 전략
2023 .06
-
Data Security in the Context of Global Security : Perspectives, Trends, and Issues
IFANS FOCUS
2020 .11
-
한-EU 해상운송보안 제도 대응전략 비교연구
무역상무연구
2015 .12
-
법정보안 담당 보안관리직류의 보안성과에 관한 연구
한국경호경비학회지
2023 .03
-
Analysis of U.S. 2015 National Security Strategy
IFANS BRIEF
2015 .03
이 논문의 저자 정보
최근 본 자료
댓글(0)
0
UCI(KEPA) : I410-ECN-0101-2020-005-000083853