Bitte verwenden Sie diesen Link, um diese Publikation zu zitieren, oder auf sie als Internetquelle zu verweisen: https://hdl.handle.net/10419/308847 
Autor:innen: 
Erscheinungsjahr: 
2022
Quellenangabe: 
[Journal:] Risk Management [ISSN:] 1743-4637 [Volume:] 25 [Issue:] 1 [Article No.:] 2 [Publisher:] Palgrave Macmillan [Place:] London [Year:] 2022
Verlag: 
Palgrave Macmillan, London
Zusammenfassung: 
Language is the foundation for any communication and the vocabulary used has a decisive influence on the ability of the communication partners to clearly understand each other. In Information Security Risk Management (ISRM), the terminology used is often dictated by industry standards and frameworks. However, there is no universally accepted terminology, which makes collaboration difficult for professionals and researchers alike. This publication compares the terminology defined by frequently used frameworks, such as ISO and NIST, in the field of ISRM. It examines the terms and inherent concepts of each terminology, compares the notion of risk and derives a concept diagram based on the most important key concepts. The result facilitates a common understanding of ISRM across frameworks and organisational boundaries, thus enables further research, discussion, intra- and inter-firm communication.
Schlagwörter: 
Risk management
Information security
Terminology
Terms
Concepts
Frameworks
Persistent Identifier der Erstveröffentlichung: 
Creative-Commons-Lizenz: 
cc-by Logo
Dokumentart: 
Article
Dokumentversion: 
Published Version

Datei(en):
Datei
Größe





Publikationen in EconStor sind urheberrechtlich geschützt.