{"product_id":"development-of-an-it-security-performance-measurement-system-von-michael-scheer","title":"Development of an IT-Security Performance Measurement System","description":"\u003cp\u003eInhaltsangabe:Abstract: \u003c\/p\u003e\u003cp\u003eAdequate security of information and the systems that process it is a fundamental management responsibility. Management must understand the current status of their IT-Security program in order to make informed decisions. \u003c\/p\u003e\u003cp\u003eIn this context, this Bachelor Thesis proposes a Performance Measurement System for IT-Security, which is designed to be well-balanced and comprehensive. It views IT-Security from four perspectives: Organisational, Financial, Operational and Personnel. \u003c\/p\u003e\u003cp\u003eThe documentation of the system contains the key figures and their interrelationships. With its modular design, it can either be used out-off-the-box or tailored to the specific requirements of the organisation. \u003c\/p\u003e\u003cp\u003eChapter 1 briefly discusses the reason for this Bachelor Thesis and introduces the problem statement. Chapter 2 explores the basic concepts behind both IT-Security and performance measurement. Chapter 3 covers general requirements, which are fundamental principles needed to be taken into consideration when building an IT-Security Performance Measurement System. Chapter 4 describes the approach taken for the design of the system. Chapter 5 introduces the Performance Measurement System for IT-Security. \u003c\/p\u003e\u003cp\u003e \u003c\/p\u003e\u003cp\u003e \u003c\/p\u003e\u003cp\u003e Inhaltsverzeichnis:Table of Contents: \u003c\/p\u003e\u003cp\u003e1.Introduction1 \u003c\/p\u003e\u003cp\u003e1.1Motivation1 \u003c\/p\u003e\u003cp\u003e1.2Problem Statement2 \u003c\/p\u003e\u003cp\u003e2.Theoretical Background3 \u003c\/p\u003e\u003cp\u003e2.1Performance Measurement4 \u003c\/p\u003e\u003cp\u003e2.1.1Definitions4 \u003c\/p\u003e\u003cp\u003e2.1.2Key Figures4 \u003c\/p\u003e\u003cp\u003e2.1.3The Balanced Scorecard6 \u003c\/p\u003e\u003cp\u003e2.2IT-Security7 \u003c\/p\u003e\u003cp\u003e2.2.1Goals of IT-Security7 \u003c\/p\u003e\u003cp\u003e2.2.2Security Policy9 \u003c\/p\u003e\u003cp\u003e2.2.3Incident Response10 \u003c\/p\u003e\u003cp\u003e2.3Risk Management11 \u003c\/p\u003e\u003cp\u003e2.3.1The Asset\/Threat\/Vulnerability\/Safeguard Concept11 \u003c\/p\u003e\u003cp\u003e2.3.2Risk Assessment12 \u003c\/p\u003e\u003cp\u003e2.3.3Risk Mitigation13 \u003c\/p\u003e\u003cp\u003e2.4Existing Standards for IT-Security14 \u003c\/p\u003e\u003cp\u003e2.4.1Standards for Information Security Management14 \u003c\/p\u003e\u003cp\u003e2.4.2Standards for Evaluation15 \u003c\/p\u003e\u003cp\u003e2.4.3Standards for Development15 \u003c\/p\u003e\u003cp\u003e2.4.4Standards for a Common Terminology16 \u003c\/p\u003e\u003cp\u003e3.Requirements19 \u003c\/p\u003e\u003cp\u003e3.1General Requirements20 \u003c\/p\u003e\u003cp\u003e3.1.1Financial Requirements20 \u003c\/p\u003e\u003cp\u003e3.1.2Regulatory Requirements20 \u003c\/p\u003e\u003cp\u003e3.1.3Organisational Requirements20 \u003c\/p\u003e\u003cp\u003e3.1.4Requirements for Performance Measurement21 \u003c\/p\u003e\u003cp\u003e3.2Requirements at a Glance22 \u003c\/p\u003e\u003cp\u003e4.Development Approach23 \u003c\/p\u003e\u003cp\u003e4.1Top-Down vs. Bottom-Up23 \u003c\/p\u003e\u003cp\u003e4.1.1Top-Down23 \u003c\/p\u003e\u003cp\u003e4.1.2Bottom-Up24 \u003c\/p\u003e\u003cp\u003e4.1.3Comparison26 \u003c\/p\u003e\u003cp\u003e4.2Development Approach chosen26 \u003c\/p\u003e\u003cp\u003e5.Findings29 \u003c\/p\u003e\u003cp\u003e5.1Top-Down Findings30 \u003c\/p\u003e\u003cp\u003e5.1.1Generic Security Model30 \u003c\/p\u003e\u003cp\u003e5.1.2Self-Assessment Guide31 \u003c\/p\u003e\u003cp\u003e5.1.3Findings and Discussion34 \u003c\/p\u003e\u003cp\u003e5.2Bottom-Up Findings36 \u003c\/p\u003e\u003cp\u003e5.2.1List of Key Figures36 \u003c\/p\u003e\u003cp\u003e5.2.2Relationships38 \u003c\/p\u003e\u003cp\u003e5.3Meet in the Middle39 \u003c\/p\u003e\u003cp\u003e5.4Discussion of Key [¿]\u003c\/p\u003e\u003cdiv class=\"aw-variant-hidden-subtitle-div\" id=\"aw-variant-subtitle-9783838667881\"\u003e\u003ch3\u003e\u003c\/h3\u003e\u003c\/div\u003e","brand":"Libri","offers":[{"title":"Softcover - 9783838667881","offer_id":39460456333405,"sku":"9783838667881","price":74.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0940\/0622\/files\/a5b47e03-45f1-431b-bea9-bb2573f93c25.jpg?v=1746943057","url":"https:\/\/shop.autorenwelt.de\/products\/development-of-an-it-security-performance-measurement-system-von-michael-scheer","provider":"Autorenwelt Shop","version":"1.0","type":"link"}