In this case study, a collaborative risk method for information security management has been analyzed considering the common problems encountered during the implementation of ISO standards in eight Turkish public organizations. This proposed risk method has been applied within different public organizations and it has been demonstrated to be effective and problem-free. The fundamental issue is that there is no legislation that regulates the information security liabilities of the public organizations in Turkey. The findings and lessons learned presented in this case provide useful insights for practitioners when implementing information security management projects in other international public sector organizations.
College of Arts, Sciences and Technology
Karabacak, B., & Ozkan, S. (2010). Collaborative risk method for information security management practices: A case context within Turkey., 30 (6), 567-572. https://doi.org/10.1016/j.ijinfomgt.2010.08.007