A process framework for information security management

Securing sensitive organizational data has become increasingly vital to organizations. An Information Security Management System (ISMS) is a systematic approach for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organization's information security. Key elements of the operation ISMS are processes. However, in spite its importance, process framework with description processes their interaction as well other management not available literature. Cost benefit analysis security investments regarding single measures protecting focus current research, mostly focused on economics. This article aims fill this research gap by proposing such main contribution. It based set agreed upon existing standards like ISO 27000 series, COBIT ITIL. Within framework, identified described interfaces specified. helps ISMS, instead focusing controls. By this, finding, systemic character consisting perception relevant roles strengthened.