Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures

Nicolas Mayer, Eric Grandry, Christophe Feltus, Elio Goettelman

Research output: Contribution in Book/Catalog/Report/Conference proceedingChapter

75 Downloads (Pure)

Abstract

Secure information systems engineering is currently a critical but complex concern. Risk management has become a standard approach to deal with the necessary trade-offs between expected security level and control cost. However, with the current interconnection between information systems combined with the in-creasing regulation and compliance requirements, it is more and more difficult to achieve real information security governance. Given that risk management is not able to deal with this complexity alone, we claim that a connection with Enterprise Architecture Management (EAM) contributes in addressing the above challenges, thereby sustaining governance and compliance in organisations. In this paper, we motivate the added value of EAM to improve security risk management and pro-pose a research agenda towards a complete framework integrating both domains
Original languageEnglish
Title of host publicationAdvanced Information Systems Engineering Workshops
PublisherSpringer
Pages459-469
Number of pages12
DOIs
Publication statusPublished - 8 Jun 2015
Event5th International Workshop on Information Systems Security Engineering, (WISSE 2015), an International Workshop of the 27th Conference on Advanced Information Systems Engineering (CAISE2015) - Stockholms, Sweden
Duration: 8 Jun 201512 Jun 2015

Publication series

Name Lecture Notes in Business Information Processing
Volume215

Scientific committee

Scientific committee5th International Workshop on Information Systems Security Engineering, (WISSE 2015), an International Workshop of the 27th Conference on Advanced Information Systems Engineering (CAISE2015)
CountrySweden
CityStockholms
Period8/06/1512/06/15

Fingerprint

Enterprise architecture
Risk management
Governance
Information systems
Trade-offs
Systems engineering
Interconnection
Research agenda
Added value
Cost control
Information security

Cite this

Mayer, N., Grandry, E., Feltus, C., & Goettelman, E. (2015). Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures. In Advanced Information Systems Engineering Workshops (pp. 459-469). ( Lecture Notes in Business Information Processing; Vol. 215). Springer. https://doi.org/10.1007/978-3-319-19243-7_42
Mayer, Nicolas ; Grandry, Eric ; Feltus, Christophe ; Goettelman, Elio. / Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures. Advanced Information Systems Engineering Workshops. Springer, 2015. pp. 459-469 ( Lecture Notes in Business Information Processing).
@inbook{eb313bb1158f476eb4203c7f3ea346c0,
title = "Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures",
abstract = "Secure information systems engineering is currently a critical but complex concern. Risk management has become a standard approach to deal with the necessary trade-offs between expected security level and control cost. However, with the current interconnection between information systems combined with the in-creasing regulation and compliance requirements, it is more and more difficult to achieve real information security governance. Given that risk management is not able to deal with this complexity alone, we claim that a connection with Enterprise Architecture Management (EAM) contributes in addressing the above challenges, thereby sustaining governance and compliance in organisations. In this paper, we motivate the added value of EAM to improve security risk management and pro-pose a research agenda towards a complete framework integrating both domains",
author = "Nicolas Mayer and Eric Grandry and Christophe Feltus and Elio Goettelman",
year = "2015",
month = "6",
day = "8",
doi = "10.1007/978-3-319-19243-7_42",
language = "English",
series = "Lecture Notes in Business Information Processing",
publisher = "Springer",
pages = "459--469",
booktitle = "Advanced Information Systems Engineering Workshops",

}

Mayer, N, Grandry, E, Feltus, C & Goettelman, E 2015, Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures. in Advanced Information Systems Engineering Workshops. Lecture Notes in Business Information Processing, vol. 215, Springer, pp. 459-469, 5th International Workshop on Information Systems Security Engineering, (WISSE 2015), an International Workshop of the 27th Conference on Advanced Information Systems Engineering (CAISE2015), Stockholms, Sweden, 8/06/15. https://doi.org/10.1007/978-3-319-19243-7_42

Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures. / Mayer, Nicolas; Grandry, Eric; Feltus, Christophe; Goettelman, Elio.

Advanced Information Systems Engineering Workshops. Springer, 2015. p. 459-469 ( Lecture Notes in Business Information Processing; Vol. 215).

Research output: Contribution in Book/Catalog/Report/Conference proceedingChapter

TY - CHAP

T1 - Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures

AU - Mayer, Nicolas

AU - Grandry, Eric

AU - Feltus, Christophe

AU - Goettelman, Elio

PY - 2015/6/8

Y1 - 2015/6/8

N2 - Secure information systems engineering is currently a critical but complex concern. Risk management has become a standard approach to deal with the necessary trade-offs between expected security level and control cost. However, with the current interconnection between information systems combined with the in-creasing regulation and compliance requirements, it is more and more difficult to achieve real information security governance. Given that risk management is not able to deal with this complexity alone, we claim that a connection with Enterprise Architecture Management (EAM) contributes in addressing the above challenges, thereby sustaining governance and compliance in organisations. In this paper, we motivate the added value of EAM to improve security risk management and pro-pose a research agenda towards a complete framework integrating both domains

AB - Secure information systems engineering is currently a critical but complex concern. Risk management has become a standard approach to deal with the necessary trade-offs between expected security level and control cost. However, with the current interconnection between information systems combined with the in-creasing regulation and compliance requirements, it is more and more difficult to achieve real information security governance. Given that risk management is not able to deal with this complexity alone, we claim that a connection with Enterprise Architecture Management (EAM) contributes in addressing the above challenges, thereby sustaining governance and compliance in organisations. In this paper, we motivate the added value of EAM to improve security risk management and pro-pose a research agenda towards a complete framework integrating both domains

U2 - 10.1007/978-3-319-19243-7_42

DO - 10.1007/978-3-319-19243-7_42

M3 - Chapter

T3 - Lecture Notes in Business Information Processing

SP - 459

EP - 469

BT - Advanced Information Systems Engineering Workshops

PB - Springer

ER -

Mayer N, Grandry E, Feltus C, Goettelman E. Towards the ENTRI Framework: Security Risk Management enhanced by the use of Enterprise Architectures. In Advanced Information Systems Engineering Workshops. Springer. 2015. p. 459-469. ( Lecture Notes in Business Information Processing). https://doi.org/10.1007/978-3-319-19243-7_42