Information Security Maturity Assessment Model in the IT Departments of the Oil Industry Subsidiaries in Iran

Q: How can I download an article?

To download an article from SID, first log in to the site, search for the article title, and click on the 'Download Article' option.

Q: How can I download an ISI article?

To download an ISI article on SID, enter the keyword or article title in the search bar, view the relevant results, click on the desired article, and select the 'Download Article' option.

Q: How can I access the SID database?

To access the SID database, visit SID.ir, create an account, and log in to access scientific resources.

Q: Is downloading articles from SID free?

Some articles on SID are available for free, while others require payment. Details are specified on the article's page.

Akhavan Fatemeh; RADFAR REZA

مرکز اطلاعات علمی Scientific Information Database (SID) - Trusted Source for Research and Academic Resources

Journal Paper

Paper Information

Journal: Roshd-e-Fanavari Year:2020 | Volume:16 | Issue:64 Page(s): 41-51

Download Full-Text

Persian Verion

View:

1,081

Download:

Cites:

Information Journal Paper

Title

Information Security Maturity Assessment Model in the IT Departments of the Oil Industry Subsidiaries in Iran

Author(s)

Akhavan Fatemeh | RADFAR REZA | Issue Writer Certificate

Keywords

Information SecurityQ2

Information Security Management System (ISMS)Q1

Maturity ModelQ2

Information Security Maturity ModelQ1

ISO27001 StandardQ1

Abstract

the business approach and risk management framework of the company through the establishment and maintenance of the Information Security management system (ISMS) is a framework for identifying, assessing, controlling and managing the risks associated with Information Security in the company. It is based on privacy standards, integrity and availability of information assets. In the present report, not only a model for evaluating the Information Security maturity in the headquarters of one of the oil industry companies is developed, but also the defect analysis and implementation of the existing organization are initially carried out in accordance with the requirements of ISO 27000. By defining the indicators of evaluation and measurement of these indicators in the organization, its maturity is estimated in this security standard. Different models are presented to identify the weaknesses and security powers of a particular organization. The goal is to identify a gap between theory and practice that can be approximated by the process-oriented approach. The puberty model introduced and used in this project, provides a starting point for implementing security, a public view of security, and a framework for prioritizing operations. This model of Information Security maturity has 5 phases. (The Maturity Model is Information Security as a tool for assessing the ability of organizations to meet security goals, that is, confidentiality, integrity and availability, and prevent attacks and access to the mission of the organization in spite of attacks and accidents)? ? . This model defines a process that has all aspects of security management, measurement, and control. The results of the evaluation show that the organizations which have security investments ahead of time have to understand the needs for high-level management of Information Security in the organization, and in addition to the actions taken in the field of physical environment, network and personal computers, controls access and encryption have been made to identify the necessary training and culture.

Cites

No record.

References

No record.

Cite

APA: Copy

Akhavan, Fatemeh, & RADFAR, REZA. (2020). Information Security Maturity Assessment Model in the IT Departments of the Oil Industry Subsidiaries in Iran. ROSHD-E-FANAVARI, 16(64 ), 41-51. SID. https://sid.ir/paper/387458/en

Vancouver: Copy

Akhavan Fatemeh, RADFAR REZA. Information Security Maturity Assessment Model in the IT Departments of the Oil Industry Subsidiaries in Iran. ROSHD-E-FANAVARI[Internet]. 2020;16(64 ):41-51. Available from: https://sid.ir/paper/387458/en

IEEE: Copy

Fatemeh Akhavan, and REZA RADFAR, “Information Security Maturity Assessment Model in the IT Departments of the Oil Industry Subsidiaries in Iran,” ROSHD-E-FANAVARI, vol. 16, no. 64 , pp. 41–51, 2020, [Online]. Available: https://sid.ir/paper/387458/en

Related Journal Papers