Book chapter
1 Citations
The Risks Associated With ITIL Information Security Management in Micro Companies
Sérgio Sargo Lopes
,
Mário Dias Lousã
,
Fernando Almeida
ISLA — Instituto Politécnico de Gestão e Tecnologia
Fraud Prevention, Confidentiality, and Data Security for Modern Businesses, 2023
Published by: IGI Global
Resume
Abstract
Information security has become a necessity for all organizations. ITIL, designed for large organizations, has also been gradually adopted by smaller companies and has incorporated practices related to information security management (ISM). This study aims to understand the main risks associated with ISM, considering the context of micro companies. For this purpose, a qualitative model was built based on four case studies of micro companies in the information technology industry. The results show that companies are concerned about information security, given the growth of external threats. However, these companies have a lack of commitment, of resources, and of knowledge that hinder the implementation of an ISM policy. Therefore, it is evident that the challenge of ISM is demanding and should be addressed, considering that the security of an organization should be analyzed in a holistic context, where all perspectives should be considered to reflect the multidisciplinary nature of security.
Keywords
#ITIL
#Information security management
#microenterprises
#small and medium-sized enterprises
#information security risk
#security policy implementation
#resource constraints
#security knowledge
#IT industry
#external threats
#ITIL security management
#business
#Information Technology Infrastructure Library
#Information Security
#Security management
#Context (archaeology)
#Multidisciplinary approach
#Knowledge Management
Bibliographic Details
Publication Type
Book chapter
Publication Year
2023
Journal / Conference / Work
Fraud Prevention, Confidentiality, and Data Security for Modern Businesses
ISSN
1948-9730
Publisher
IGI Global
Publication Status
Published