<abstract xmlns="http://www.w3.org/1999/xhtml"><p> In the context of modern information systems, security has become one of the most critical quality attributes. The purpose of this paper is to address the problem of quality of information security. An approach to solve this problem is based on the main assumption that security is a process oriented activity. According to this approach, product quality can be achieved by means of process quality - process capability. Introduced in the paper, SPICE conformant information security process capability model is based on process capability modeling elaborated by world-wide software engineering community during the last 25 years, namely ISO/IEC 15504 that defines the capability dimension and the requirements for process definition and domain independent integrated model for enterprise-wide assessment and Enterprise SPICE improvement</p></abstract>

In the context of modern information systems, security has become one of the most critical quality attributes. The purpose of this paper is to address the problem of quality of information security. An approach to solve this problem is based on the main assumption that security is a process oriented activity. According to this approach, product quality can be achieved by means of process quality - process capability. Introduced in the paper, SPICE conformant information security process capability model is based on process capability modeling elaborated by world-wide software engineering community during the last 25 years, namely ISO/IEC 15504 that defines the capability dimension and the requirements for process definition and domain independent integrated model for enterprise-wide assessment and Enterprise SPICE improvement

Security Process Capability Model Based on ISO/IEC 15504 Conformant Enterprise SPICE

Applied Computer Systems

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

In the context of modern information systems, security has become one of the most critical quality attributes. The purpose of this paper is to address the...

Security Process Capability Model Based on ISO/IEC 15504 Conformant Enterprise SPICE

Published Online: Sep 02, 2014

Page range: 36 - 41

DOI: https://doi.org/10.2478/acss-2014-0006

Keywords
Enterprise SPICE, information security, process capability, Security SPICE

© Riga Technical University

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Security Process Capability Model Based on ISO/IEC 15504 Conformant Enterprise SPICE

Published Online: Sep 02, 2014

Page range: 36 - 41

DOI: https://doi.org/10.2478/acss-2014-0006

KeywordsEnterprise SPICE, information security, process capability, Security SPICE

© Riga Technical University

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Keywords
Enterprise SPICE, information security, process capability, Security SPICE