ICT security is a management issue

Abstract

ABSTRACT It’s critical to know what are the critical resources and processes of the company and their weaknesses. Security has become a management problem. A security audit can offer a handy solution. We have developed a method and a system. The system is called BEVA. BEVA includes a security audit measuring the security situation of the organization in 38 security factors. Based on this audit, it delivers an overall security score and one for each security factor. It also supports management in detecting the critical security factors in the company. We have used the results from these audits to develop a security policy model.