A Generic Framework for Information Security Policy Development

Policy and Power A framework for re-thinking information security

Successful enforcement of information security requires an understanding of a complex interplay of social and technological forces. We focus on organizational security policies, and on power in organizations, drawing on socio-technical literature to develop an analytical framework. We present three case studies from a large empirical study in an international company including 55 interviews wit...

An Information Security Policy Development Life Cycle

Despite the fact that the formulation and use of information security policies are commonly practiced and that organizations devote significant resources to information security management, it is commonplace that the application of a security policy fails to accomplish its goals. For example, policies may be issued but not reviewed to include new regulatory requirements or business process chan...

Generic Security Framework for Cloud Computing Environments

Development of an Artifact for Benchmarking Information Security Policy

Benchmarking of information security policies has two challenges: lack of communication between organizations and no two organizations are identical. In this paper, we attempt to propose an artifact for a benchmarking method of information security policy (BMISP), which can resolve the above challenges. We employ design science methodology, activity theory and international standards to design ...

A generic framework for game development

This article describes a generic framework used in the MR based AMIRE (Authoring Mixed Reality) project. The concepts of the presented framework can be used in every 3D based application (e.g. game, VR-/ARapplications etc.) and our approach allows an easy communication between the objects (game objects). If you are working on several games or VR/AR based applications you will see a common patte...