Početna » Synthesis 2015 - International Scientific Conference of IT and Business-Related Research » Information Security and Cryptographic Applications
- The Use of the Internet and Development Perspectives
- Information Security and Cryptographic Applications
- Applied Informatics and Education
- Energy Efficiency and Distributed Systems
- Advanced Engineering Systems
- Contemporary Business and Management
- Finance and Banking
- Tourism and Hospitality
- Marketing and Trade
- Geographic Information Systems
- Modern Forms of Entrepreneurship and Investment
- Human Resource Management
- Accounting and Insurance
- Business Law
- Language for Specific Purposes (LSP)
Optimizing corporate Information Security Management in the post-“Heartbleed” world
Keywords:
risk management, incident management, vulnerability management, information security risk intelligence.
Abstract:
An optimal business process is defined as a dynamic process that is able to adapt rapidly to the changing environment and maintain satisfactory level of performance directed towards achieving the predefined set of objectives. Corporate information security management is a business process focused on managing risk that can have adverse effects on vital corporate information and related technology and processes. Rapid evolution of information and communication technology (ICT) and ways it is used to collect, analyze and disseminate information carries many opportunities to improve corporate value chain, but also carries uncertainty and new risks. Unexpected flaws were recently discovered in fundamental building blocks of ICT such as OpenSSL challenging methods used to manage corporate information security. In this paper, we will review information security management process focusing on its risk management component and suggest improvements in order to remain proactive. Suggested improvements will cover methods for assessing and measuring risk in the areas of ICT that were hit by unexpected vulnerabilities such as business application development and integration, establishing corporate information security incident response teams, and developing a framework for exchanging information security threat intelligence.
CITATION:
IEEE format
V. Polić, “Optimizing corporate Information Security Management in the post-“Heartbleed” world,” in Synthesis 2015 - International Scientific Conference of IT and Business-Related Research, Belgrade, Singidunum University, Serbia, 2015, pp. 85-89. doi:10.15308/Synthesis-2015-85-89
APA format
Polić, V. (2015). Optimizing corporate Information Security Management in the post-“Heartbleed” world. Paper presented at Synthesis 2015 - International Scientific Conference of IT and Business-Related Research. doi:10.15308/Synthesis-2015-85-89
BibTeX format
Download
RefWorks Tagged format
Download
