Back
Book chapter 1 Citations

The Risks Associated With ITIL Information Security Management in Micro Companies

Sérgio Sargo Lopes , Mário Dias Lousã , Fernando Almeida
ISLA — Instituto Politécnico de Gestão e Tecnologia
Fraud Prevention, Confidentiality, and Data Security for Modern Businesses, 2023 Published by: IGI Global

Resume

Abstract
Information security has become a necessity for all organizations. ITIL, designed for large organizations, has also been gradually adopted by smaller companies and has incorporated practices related to information security management (ISM). This study aims to understand the main risks associated with ISM, considering the context of micro companies. For this purpose, a qualitative model was built based on four case studies of micro companies in the information technology industry. The results show that companies are concerned about information security, given the growth of external threats. However, these companies have a lack of commitment, of resources, and of knowledge that hinder the implementation of an ISM policy. Therefore, it is evident that the challenge of ISM is demanding and should be addressed, considering that the security of an organization should be analyzed in a holistic context, where all perspectives should be considered to reflect the multidisciplinary nature of security.

Keywords

#ITIL #Information security management #microenterprises #small and medium-sized enterprises #information security risk #security policy implementation #resource constraints #security knowledge #IT industry #external threats #ITIL security management #business #Information Technology Infrastructure Library #Information Security #Security management #Context (archaeology) #Multidisciplinary approach #Knowledge Management

Bibliographic Details

Publication Type Book chapter
Publication Year 2023
Journal / Conference / Work Fraud Prevention, Confidentiality, and Data Security for Modern Businesses
ISSN 1948-9730
Publisher IGI Global
Publication Status Published

ISLA Authors & Affiliations

S
Sérgio Francisco Sargo Ferreira Lopes
ssargo@ispgaya.pt ID: D411-4C84-14EC
Profile