I. Livshitz, Kseniya A. Nikiforova, P. Lontsikh, Viktoria A. Karaseva
{"title":"根据ISO/IEC 27001的资讯科技保安要求,评估电子服务","authors":"I. Livshitz, Kseniya A. Nikiforova, P. Lontsikh, Viktoria A. Karaseva","doi":"10.1109/ITMQIS.2016.7751921","DOIUrl":null,"url":null,"abstract":"This publication discusses the problem of compliance evaluation for electronic services (ES). The relevance of this publication caused certain problems in the ES organization, formation of international confidence in the ES provided, as well as a wide range of approaches to ensure IT-security. It is noted that along with well-known standards set by the various national regulators, well-known term for the purpose of forming an objective and independent evidence of the ES credibility can provide international standards ISO 27001 series. Methodical basis of the ISO 27001 series operates with an objective and independent assessment of the many IT-security metrics for the quantitative estimation of the IT-security level for ES. The obtained results can find application in the provision of international confidence for ES services through objective and independent IT-security evaluation.","PeriodicalId":330739,"journal":{"name":"2016 IEEE Conference on Quality Management, Transport and Information Security, Information Technologies (IT&MQ&IS)","volume":"63 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2016-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"3","resultStr":"{\"title\":\"The evaluation of the electronic services with accordance to IT-security requirements based on ISO/IEC 27001\",\"authors\":\"I. Livshitz, Kseniya A. Nikiforova, P. Lontsikh, Viktoria A. Karaseva\",\"doi\":\"10.1109/ITMQIS.2016.7751921\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"This publication discusses the problem of compliance evaluation for electronic services (ES). The relevance of this publication caused certain problems in the ES organization, formation of international confidence in the ES provided, as well as a wide range of approaches to ensure IT-security. It is noted that along with well-known standards set by the various national regulators, well-known term for the purpose of forming an objective and independent evidence of the ES credibility can provide international standards ISO 27001 series. Methodical basis of the ISO 27001 series operates with an objective and independent assessment of the many IT-security metrics for the quantitative estimation of the IT-security level for ES. The obtained results can find application in the provision of international confidence for ES services through objective and independent IT-security evaluation.\",\"PeriodicalId\":330739,\"journal\":{\"name\":\"2016 IEEE Conference on Quality Management, Transport and Information Security, Information Technologies (IT&MQ&IS)\",\"volume\":\"63 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2016-10-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"3\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2016 IEEE Conference on Quality Management, Transport and Information Security, Information Technologies (IT&MQ&IS)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ITMQIS.2016.7751921\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2016 IEEE Conference on Quality Management, Transport and Information Security, Information Technologies (IT&MQ&IS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ITMQIS.2016.7751921","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
The evaluation of the electronic services with accordance to IT-security requirements based on ISO/IEC 27001
This publication discusses the problem of compliance evaluation for electronic services (ES). The relevance of this publication caused certain problems in the ES organization, formation of international confidence in the ES provided, as well as a wide range of approaches to ensure IT-security. It is noted that along with well-known standards set by the various national regulators, well-known term for the purpose of forming an objective and independent evidence of the ES credibility can provide international standards ISO 27001 series. Methodical basis of the ISO 27001 series operates with an objective and independent assessment of the many IT-security metrics for the quantitative estimation of the IT-security level for ES. The obtained results can find application in the provision of international confidence for ES services through objective and independent IT-security evaluation.