Naslov
Risk Management & Business Continuity Plan as fundamental activites for an implementation and maintaining of Information Security Management Systems

Autori
Ćosić, Zoran ; Boban, Marija ; Ćosić, Jasmin

Vrsta, podvrsta i kategorija rada
Radovi u zbornicima skupova, cjeloviti rad (in extenso), znanstveni

Izvornik
TELFOR 2010 / - Beograd, 2010

Skup
18th Telecommunications forum TELFOR 2010

Mjesto i datum
Beograd, Srbija, 23.11.2010. - 25.11.2010

Vrsta sudjelovanja
Predavanje

Vrsta recenzije
Međunarodna recenzija

Ključne riječi
information security; international standard; risk management; risk analysis; security threats; business continuity; operations continuity; impact analysis

Sažetak
This paper addresses to the importance of establishing the information security management systems (ISMS) as a foundation for managing an organization’s information security risks. Probability of company’s business success depends on the efficient design and implementation of the ISMS that is influenced by actual company needs and objectives, security requirements, employed business processes and organizational overall business risks. The authors in the paper give their own method of risk analysis design ed on the platform of CRAMM method and MAGERIT method which have been used by British and Spanish governments as the recommended methods for risk analysis coordinating with ISO 27000. Further the authors will give the presentation of the fundamental activities of Business Continuity Plan (BCP) methodology including the main process of operational continuity

Izvorni jezik
Engleski

Znanstvena područja
Informacijske i komunikacijske znanosti

POVEZANOST RADA