Regresar

Management of scorecards and metrics to manage security in SMEs

Abstract:

Information Society depends more and more on Information Security Management Systems (ISMSs) and the availability of these systems has become vital for the evolution of Small and Medium Enterprises (SMEs). However, this kind of enterprises requires that ISMSs are adapted to their special characteristics and optimized from the viewpoint of the necessary resources to implement and maintain them. This paper presents the mechanisms included in the security management methodology for SMEs called MGSM-PYME that enables the responsible for security to have at all times knowledge of the level of security management of the enterprise. This model is being directly applied to real cases, thus obtaining a constant improvement in its application. Copyright 2009 ACM.