|
Critical Success Factors in implementing information security governance (Case study: Iranian Central Oil Fields Company)
|
Fatemeh Akhavan1   , Seyed Abdullah Amin Mousavi 2, Abolghasem Sarabadani3 |
1- PHD student, Information Technology Management, Islamic Azad University, Central Tehran Branch, Tehran, Iran
2- Assistant Professor, Industrial Management Dept, Information Technology Management, Islamic Azad University, Central Tehran Branch, Tehran, Iran , saa.mousavi@iau.ac.ir
3- Assistant Professor, Information Technology Management Dept, Tarbiat Modares University, Tehran, Iran |
|
|
Abstract: (509 Views) |
The oil industry, as one of the main industries of the country, has always faced cyber attacks and security threats. Therefore, the integration of information security in corporate governance is essential and a governance challenge. The integration of information security and corporate governance is called information security governance. In this research, we identified "critical success factors" in the implementation of information security by using metasynthesis method and studying sources related to information security. Because before any planning and policy making in the field of information security governance, it is necessary to pay attention to this category. In the following, we classified these factors based on the focus areas of information security governance, which include strategic alignment with business strategies; risk management; resource management; performance measurement ; value delivery. The output will be an approach for the successful and effective implementation of information security governance, especially in the oil industry.
|
|
| Keywords: Information security, Information security governance, critical success factors, key performance indicator |
|
|
Full-Text [PDF 1300 kb]
(456 Downloads)
|
Type of Study: Research |
Subject:
Management
Received: 2022/07/18 | Accepted: 2022/12/17 | Published: 2023/05/5
|
|
|
|
|
|
