Academic Journal
Towards Automated Information Security Governance
| Τίτλος: | Towards Automated Information Security Governance |
|---|---|
| Συγγραφείς: | Ariane Trammell, Benjamin Gehring, Marco Isele, Yvo Spielmann, Valentin Zahnd |
| Πηγή: | Proceedings of the 10th International Conference on Information Systems Security and Privacy. :120-127 |
| Στοιχεία εκδότη: | SCITEPRESS - Science and Technology Publications, 2024. |
| Έτος έκδοσης: | 2024 |
| Θεματικοί όροι: | Automation, 658: Allgemeines Management, Security control, 005: Computerprogrammierung, Programme und Daten, Governance risk and compliance (GRC), Security management |
| Περιγραφή: | Securing a company is not an easy task. Many organizations such as NIST, CIS, or ISO offer frameworks that offer comprehensive security measures. However, those frameworks are generally large and require expert knowledge to be tailored to a given organization. Since such experts are rare, we propose an automated solution that selects security controls and prioritizes them according to an organizations need. We performed initial steps towards the implementation of the proposed solution by evaluating how Natural Language Processing can be used to select security controls that are relevant for the assets of a company and by showing that we can prioritize the selected controls based on the current threat landscape. We expect the proposed solution to be a major benefit for all organizations that intend to improve their security posture but are limited in specialized personnel. |
| Τύπος εγγράφου: | Article Conference object |
| DOI: | 10.5220/0012357500003648 |
| DOI: | 10.21256/zhaw-30377 |
| Αριθμός Καταχώρησης: | edsair.doi.dedup.....7d42dfee7069a4d23249940fccd655da |
| Βάση Δεδομένων: | OpenAIRE |
| DOI: | 10.5220/0012357500003648 |
|---|