Please use this identifier to cite or link to this item: https://hdl.handle.net/10419/281873 
Year of Publication: 
2020
Citation: 
[Journal:] UTMS Journal of Economics [ISSN:] 1857-6982 [Volume:] 11 [Issue:] 1 [Year:] 2020 [Pages:] 67-79
Publisher: 
University of Tourism and Management, Skopje
Abstract: 
Information security (INFOSEC) seeks to integrate previously distinct disciplines such as: employee security, computer security, communications security and operational security. It is ensured by an appropriate set of controls, which can be principles, practices, procedures, organizational structures, and software functions. The ISO/IEC 27001 standard is subject to different areas of application as well as differentiation of possible processes in the organization that are related to the management of security control such as: security policy, security of the organization, control and classification of the source, security of employees, security of tangible assets and environment, operational management and communications, access control, development and maintenance of various systems, and continuity management. We address the following areas: information security, ISO/IEC 27001 standard and provide some negative examples from countries in the WB6 region where the abuse of IT systems took place due to non-compliance, i.e. the lack of minimum security standards necessary for safe, quality and systematic operation in public institutions. It is necessary to create a national strategy that should list short-term, medium-term and long-term measures that need to be taken and implemented in order to follow the security IT standards and trends in countries where this type of standards and measures are applied and give appropriate results.
Subjects: 
computer security
information security
standardization
corrupt activities
JEL: 
K42
K24
F52
Document Type: 
Article

Files in This Item:
File
Size
773.95 kB





Items in EconStor are protected by copyright, with all rights reserved, unless otherwise indicated.