Browsing by Author "Farn, KJ"

Now showing 1 - 2 of 2

A study on information security management system evaluation - assets, threat and vulnerability
(2004-10-01)
Farn, KJ
;
Lin, SK
;
Fung, ARW
;
資訊管理與財務金融系註：原資管所+財金所
;
Department of Information Management and Finance
The security of information system is like a chain. Its strength is affected by the weakest knot. Since we can achieve 100% Information Security Management System (ISMS) security, we must cautiously fulfill the certification and accreditation of information security. In this paper, we analyzed, studied the evaluation knowledge and skills required for auditing the certification procedures for the three aspects of ISMS-asset, threat, and vulnerability. (C) 2004 Elsevier B.V. All rights reserved.
Paper: a study on the certification of the information security management systems
(2003-09-01)
Fung, ARW
;
Farn, KJ
;
Lin, AC
;
資訊管理與財務金融系註：原資管所+財金所
;
Department of Information Management and Finance
Current reliable strategies for information security are all chosen using incomplete information. With standards, problems resulting from incomplete information can be reduced, since with standards, we can decrease the choices and simplify the process for reliable supply and demand decision making. This paper is to study the certification of information security management systems based on specifications promulgated by the Bureau of Standards, Metrology and Inspection (BSMI), Ministry of Economic Affairs in accordance with international standards and their related organizations. And we suggest a certification requirement concept for five different levels of "Information and Communication Security Protection System" in our country, the Republic of China, Taiwan. (C) 2003 Elsevier Science B.V. All rights reserved.