Please use this identifier to cite or link to this item: https://hdl.handle.net/10419/308847 
Year of Publication: 
2022
Citation: 
[Journal:] Risk Management [ISSN:] 1743-4637 [Volume:] 25 [Issue:] 1 [Article No.:] 2 [Publisher:] Palgrave Macmillan [Place:] London [Year:] 2022
Publisher: 
Palgrave Macmillan, London
Abstract: 
Language is the foundation for any communication and the vocabulary used has a decisive influence on the ability of the communication partners to clearly understand each other. In Information Security Risk Management (ISRM), the terminology used is often dictated by industry standards and frameworks. However, there is no universally accepted terminology, which makes collaboration difficult for professionals and researchers alike. This publication compares the terminology defined by frequently used frameworks, such as ISO and NIST, in the field of ISRM. It examines the terms and inherent concepts of each terminology, compares the notion of risk and derives a concept diagram based on the most important key concepts. The result facilitates a common understanding of ISRM across frameworks and organisational boundaries, thus enables further research, discussion, intra- and inter-firm communication.
Subjects: 
Risk management
Information security
Terminology
Terms
Concepts
Frameworks
Persistent Identifier of the first edition: 
Creative Commons License: 
cc-by Logo
Document Type: 
Article
Document Version: 
Published Version

Files in This Item:
File
Size





Items in EconStor are protected by copyright, with all rights reserved, unless otherwise indicated.