Information Security and System Development

Abstract

Due to globalization, stronger competition, increased complexity, information explosion, interconnection and exten-sive use of IT data and information management are main performance driver and key differentiator for sustainable or-ganization success. Long time organizations had developed IT systems regarding overall access rights. Due to stronger re-quirements of data protection code and increased requirements for data integrity, availability and confidentiality information security is a key requirement for system development. Many organizations of different sizes are implementing standard based management systems, such as quality ISO9001, environ-mental ISO14001or others, which are based on common prin-ciples: objectives and strategies, business processes, resource management and continuously optimization. Due to this situa-tion we used in different case studies as basis for system devel-opment a the organization adapted, holistic, standard based management system to analyze the system requirements. This promotes legal conformity, information security awareness, ef-fectiveness and information security improvement for sustain-able organization success.