ICT security management

Abstract

Security becomes more and more important and companies are aware that it has become a management problem. It's critical to know what are the critical resources and processes of the company and their weaknesses. A security audit can be a handy solution. We have developed BEVA, a method to critically analyse the company and to uncover the weak spots in the security system. BEVA results also in a general security score and security scores for each security factor. These will be used in the risk analysis. The goal is to increase the security score Ss to a postulated level by focusing on the critical security factors, those with a low security score. We will identify the critical threats too, being those with a high risk or expected loss for the company if they occur. In the next stage it will be resolved to implement some security measures to decrease the probabilities of the occurrence of the threats and as a consequence to decrease the risks and to improve the security situation.