After Information Security - Before a Paradigm Change (A Complex Enterprise Security Model)

Abstract

Security management for business enterprises is currently undergoing major changes. Instead of the separate regulation of distinct areas (guarding infrastructure, work safety, security technology, information security, etc.) there is an emerging holistic approach based on new management methods and company culture. Partly as a result of existing traditions, the professional business background to the implementation of these changes is rather fragmented and may not yet exist at all. Our survey calls attention to a new opportunity. In our opinion the expected level of company security and business continuity may be reached departing from information security-related international standards and recommendations, by business risk analysis and compliance with a wide range of security expectations.