Managing information security in small and medium sized enterprises: A holistic approach

Tawileh, Anas, Hilton, Jeremy Charles and McIntosh, Stephen 2007. Managing information security in small and medium sized enterprises: A holistic approach. Presented at: ISSE/SECURE Conference 2007, Warsaw, Poland, 25-27 September 2007. Published in: Pohlmann, Norbert, Reimer, Helmut and Schneider, Schneider eds. ISSE/SECURE 2007 Securing Electronic Business Processes: Highlights of the Information Security Solutions Europe/SECURE 2007 Conference. ISSE/SECURE 2007 Securing Electronic Business Processes. Wiesbaden, Germany: Vieweg, pp. 331-339. 10.1007/978-3-8348-9418-2_35

Full text not available from this repository.

Abstract

Small to medium sized enterprises (SMEs) constitute a major part of the global economic activity. Due to the distinct characteristics of these enterprises, approaches to information security management that were mainly developed for larger organisations can not be feasibly applied in the context of SMEs. In this paper, we present some of the challenges impeding the implementation of information security management in SMEs. We propose a holistic approach based on Soft Systems Methodology to facilitate the development of security management systems within SMEs. The new approach acknowledges the limitations faced by SMEs and accounts for the systemic nature of the information security problem. We demonstrate the usefulness of our approach through a practical case study. The paper concludes with a brief summary of the findings and presents directions for future work.

Item Type:	Conference or Workshop Item (Paper)
Date Type:	Publication
Status:	Published
Schools:	Computer Science & Informatics
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Publisher:	Vieweg
ISBN:	9783834803467
Related URLs:	Publisher
Last Modified:	19 Mar 2016 23:18
URI:	https://orca.cardiff.ac.uk/id/eprint/46453

Citation Data

Cited 18 times in Scopus. View in Scopus. Powered By Scopus® Data

Actions (repository staff only)

Edit Item