Informationssicherheitsmanagement - Quellen

---

[CIS10] Information Systems Audit and Control Association (ISACA), Certified Information Security Manager (CISM), Review Manual 2010, 2010

[COB12] COBIT 5 – Rahmenwerk für Governance und Management der Unternehmens-IT, ISACA, www.isaca.org, 2012

[CSI01] Computer Security Institute 2001, in Information Security Management Handbook, Seite 346, http://www.gocsi.com

[DSG00] Bundesgesetz über den Schutz personenbezogener Daten (Datenschutzgesetz 2000 - DSG 2000), Fassung vom 15.01.2015

[FAR05] Jack A. Jones, An Introduction to Factor Analysis of Information Risk (FAIR), A framework for understanding, analyzing, and measuring information risk, Draft, Risk Management Insight, 2005

[FRG07] Martin Fröhlich, Kurt Glasner (Hrsg.): IT Governance, Leitfaden für eine praxisgerechte Implementierung, Gabler, Wiesbaden 2007.

[ISM03] Harold F. Tipton, Micki Krause: Information Security Management Handbook, Volume 4,Auerbach Publications, 2003

[ISM14] Dieter Burgartz / Ralf Röhring (Hrsg.): Information Security Management, Praxishandbuch für Aufbau, Zertifizierung und Betrieb, Loseblattsammlung, TÜV Verlag, Köln, 41. Akt. Lieferung, 2014.

[ISO00] ISO/IEC 27000:2014, Information technology – Security techniques – Information security management systems – Overview and vocabulary, Third edition, 2014-01-15

[ISO01] ISO/IEC 27001:2013, Information technology – Security techniques – Information security management systems – Requirements, Second edition, 2013-10-01

[ISO02] ISO/IEC 27002:2013, Information technology – Security techniques – Code of practice for information security controls, Second edition, 2013-10-01

[ISO03] ISO 22301:2012, Societal security – Business continuity management systems – Requirements, First edition, 2012-05-15

[ISO04] ISO 22313:2012, Societal security – Business continuity management systems – Guidance, First edition, 2012-12-12

[IST07] Office of Government Commerce OCG, ITIL Service Transition, The Stationery Office (TSO), 2007

[NIS02] Risk Management Guide for Information Technology Systems, Gary Stoneburner, Alice Goguen, Alexis Feringa, National Institute of Standards and Technology, USA, 2002

[RFA00] John P. Kindinger, John L. Darby, Risk Factor Analysis – A New Qualitative Risk Management Tool, Probabilistic Risk and Hazards Analysis Group, Los Alamos National Laboratory, 2000

[COB07] IT Governance Institute, CobiT 4.1 – Framework, Control Objectives, Management Guidelines, Maturity Models, IT Governance Institute, 2007