Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment

Feasibility Study on incorporating IEC/ISO27001 Information Security Management System (ISMS) in IT Services Environment is a research study by taking an organization as a case study to carry out a feasibility study on existing maturity level of managing information security and propose an implement...

Full description

Saved in:

Bibliographic Details
Main Author:	Hau, Lian Hong
Format:	Thesis
Language:	English
Published:	2013
Subjects:	QA76 Computer software
Online Access:	http://eprints.utm.my/id/eprint/48208/1/HauLianHongMFC2013.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-utm-ep.48208
record_format	uketd_dc
spelling	my-utm-ep.482082017-09-13T07:31:34Z Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment 2013 Hau, Lian Hong QA76 Computer software Feasibility Study on incorporating IEC/ISO27001 Information Security Management System (ISMS) in IT Services Environment is a research study by taking an organization as a case study to carry out a feasibility study on existing maturity level of managing information security and propose an implementation approach to the organization based on ISO27001 ISMS standards. The activities involve the security gap assessment, drafting the mandatory documents as per ISO 27001 ISMS standard requirement. The objective of this study is to identify the common information security incidents and the ISO27001 ISMS practices on corrective and prevention actions. Beside, this research study is focusing on analyzing the current state of an organization by conducting a feasibility study on the readiness of ISO27001 ISMS practiced by the organization. The methodology of this research study was derived with the research operational framework that comprised of several project phases, ISO27001 ISMS implementation phases that mapped to the deliverables. The deliverables and expected results are series of document sets that must comply to the ISO27001 ISMS standard such as initial draft of ISMS policy manual, risk assessment methodology, risk assessment report, statement of applicability (SOA) will be developed to meet the ISO27001 ISMS requirement and criteria. Also, the mandatory activities such as gap assessment, information security risk assessment will be proposed and conducted with the relevant reports to be prepared as part of the results and findings to accomplish the objectives of this research study. The findings of the feasibility study from the gap assessment that has been performed within an organization are not meeting the requirement of ISO27001 ISMS. Hence, this research study proposed the implementation approach based on ISO27001 ISMS standards to implement the ISMS controls to close the gaps and mitigate the risks identified from the gap assessment findings. 2013 Thesis http://eprints.utm.my/id/eprint/48208/ http://eprints.utm.my/id/eprint/48208/1/HauLianHongMFC2013.pdf application/pdf en public http://libraryopac.utm.my/client/en_AU/main/search/results?qu=Feasibility+study+on+incorporating+IEC&te= masters Universiti Teknologi Malaysia, Faculty of Computing Faculty of Computing
institution	Universiti Teknologi Malaysia
collection	UTM Institutional Repository
language	English
topic	QA76 Computer software
spellingShingle	QA76 Computer software Hau, Lian Hong Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment
description	Feasibility Study on incorporating IEC/ISO27001 Information Security Management System (ISMS) in IT Services Environment is a research study by taking an organization as a case study to carry out a feasibility study on existing maturity level of managing information security and propose an implementation approach to the organization based on ISO27001 ISMS standards. The activities involve the security gap assessment, drafting the mandatory documents as per ISO 27001 ISMS standard requirement. The objective of this study is to identify the common information security incidents and the ISO27001 ISMS practices on corrective and prevention actions. Beside, this research study is focusing on analyzing the current state of an organization by conducting a feasibility study on the readiness of ISO27001 ISMS practiced by the organization. The methodology of this research study was derived with the research operational framework that comprised of several project phases, ISO27001 ISMS implementation phases that mapped to the deliverables. The deliverables and expected results are series of document sets that must comply to the ISO27001 ISMS standard such as initial draft of ISMS policy manual, risk assessment methodology, risk assessment report, statement of applicability (SOA) will be developed to meet the ISO27001 ISMS requirement and criteria. Also, the mandatory activities such as gap assessment, information security risk assessment will be proposed and conducted with the relevant reports to be prepared as part of the results and findings to accomplish the objectives of this research study. The findings of the feasibility study from the gap assessment that has been performed within an organization are not meeting the requirement of ISO27001 ISMS. Hence, this research study proposed the implementation approach based on ISO27001 ISMS standards to implement the ISMS controls to close the gaps and mitigate the risks identified from the gap assessment findings.
format	Thesis
qualification_level	Master's degree
author	Hau, Lian Hong
author_facet	Hau, Lian Hong
author_sort	Hau, Lian Hong
title	Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment
title_short	Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment
title_full	Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment
title_fullStr	Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment
title_full_unstemmed	Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment
title_sort	feasibility study on incorporating iec/iso27001 information security management system (isms) standard in it services environment
granting_institution	Universiti Teknologi Malaysia, Faculty of Computing
granting_department	Faculty of Computing
publishDate	2013
url	http://eprints.utm.my/id/eprint/48208/1/HauLianHongMFC2013.pdf
_version_	1747817334090760192

Feasibility study on incorporating IEC/ISO27001 information security management system (ISMS) standard in it services environment

Similar Items