IT Security Management Implementation Model in Iranian Bank Industry | ||
| Journal of Information Technology Management | ||
| مقاله 11، دوره 9، شماره 2، 2017، صفحه 379-404 اصل مقاله (666.44 K) | ||
| نوع مقاله: Research Paper | ||
| شناسه دیجیتال (DOI): 10.22059/jitm.2017.61097 | ||
| نویسندگان | ||
| Mona Vanaki1؛ Mohammad Reza Taghva* 2؛ Mohammad Taghi Taghavifard2؛ Kamran Feizi ‎3 | ||
| 1Ph.D. Candidate in IT, Allameh Tabatab’i University, Tehran, Iran | ||
| 2Associate Prof. in Industrial Management, Allameh Tabatab’i University, Tehran, Iran | ||
| 3Prof. in Industrial Management, Allameh Tabatab’i University, Tehran, Iran | ||
| چکیده | ||
| According to the complexity and differences between Iranian banks and other developed countries the appropriate actions to implement effective security management of information technology have not been taken. The aim of this study was to create a powerful model by selecting the appropriate security controls to protect information assets in the bank. In this model, at first the principle set fort in ISO standard 27001, was extracted and then by further studies derived from best practices carried out in the world on the related subject from 2008 to 2016 using a qualitative descriptive method), points comply with information security management in the banking industry were added to it. With the study of Iranian banks in dealing with IT security management system and with help of action research tools, provisions which prevent the actual implementation of this standard was removed and finally a conceptual model with operating instructions and considering all the principles of information security management standard, as well as banking institutions focusing on the characteristics of Iran was proposed. | ||
| کلیدواژهها | ||
| Asset؛ Banking؛ Information security management system certification؛ ISO 27001 standard | ||
| مراجع | ||
|
| ||
|
آمار تعداد مشاهده مقاله: 2,875 تعداد دریافت فایل اصل مقاله: 2,558 |
||