Advanced approach to information security management system model for industrial control system

Sanghyun Park, Kyung Ho Lee

Research output: Contribution to journalArticle

7 Citations (Scopus)

Abstract

Organizations make use of important information in day-to-day business. Protecting sensitive information is imperative and must be managed. Companies in many parts of the world protect sensitive information using the international standard known as the information security management system (ISMS). ISO 27000 series is the international standard ISMS used to protect confidentiality, integrity, and availability of sensitive information. While an ISMS based on ISO 27000 series has no particular flaws for general information systems, it is unfit to manage sensitive information for industrial control systems (ICSs) because the first priority of industrial control is safety of the system. Therefore, a new information security management system based on confidentiality, integrity, and availability as well as safety is required for ICSs. This new ISMS must be mutually exclusive of an ICS. This paper provides a new paradigm of ISMS for ICSs, which will be shown to be more suitable than the existing ISMS.

Original languageEnglish
Pages (from-to)348305
Number of pages1
JournalTheScientificWorldJournal
Volume2014
DOIs
Publication statusPublished - 2014

Fingerprint

Management Information Systems
Security of data
control system
Control systems
Confidentiality
Availability
Safety
Information Systems
Industry
Information systems
safety
Organizations
Defects

ASJC Scopus subject areas

  • Medicine(all)

Cite this

Advanced approach to information security management system model for industrial control system. / Park, Sanghyun; Lee, Kyung Ho.

In: TheScientificWorldJournal, Vol. 2014, 2014, p. 348305.

Research output: Contribution to journalArticle

@article{d7846a56ecf84a31aebc1c651c000883,
title = "Advanced approach to information security management system model for industrial control system",
abstract = "Organizations make use of important information in day-to-day business. Protecting sensitive information is imperative and must be managed. Companies in many parts of the world protect sensitive information using the international standard known as the information security management system (ISMS). ISO 27000 series is the international standard ISMS used to protect confidentiality, integrity, and availability of sensitive information. While an ISMS based on ISO 27000 series has no particular flaws for general information systems, it is unfit to manage sensitive information for industrial control systems (ICSs) because the first priority of industrial control is safety of the system. Therefore, a new information security management system based on confidentiality, integrity, and availability as well as safety is required for ICSs. This new ISMS must be mutually exclusive of an ICS. This paper provides a new paradigm of ISMS for ICSs, which will be shown to be more suitable than the existing ISMS.",
author = "Sanghyun Park and Lee, {Kyung Ho}",
year = "2014",
doi = "10.1155/2014/348305",
language = "English",
volume = "2014",
pages = "348305",
journal = "Scientific World Journal",
issn = "2356-6140",
publisher = "Hindawi Publishing Corporation",

}

TY - JOUR

T1 - Advanced approach to information security management system model for industrial control system

AU - Park, Sanghyun

AU - Lee, Kyung Ho

PY - 2014

Y1 - 2014

N2 - Organizations make use of important information in day-to-day business. Protecting sensitive information is imperative and must be managed. Companies in many parts of the world protect sensitive information using the international standard known as the information security management system (ISMS). ISO 27000 series is the international standard ISMS used to protect confidentiality, integrity, and availability of sensitive information. While an ISMS based on ISO 27000 series has no particular flaws for general information systems, it is unfit to manage sensitive information for industrial control systems (ICSs) because the first priority of industrial control is safety of the system. Therefore, a new information security management system based on confidentiality, integrity, and availability as well as safety is required for ICSs. This new ISMS must be mutually exclusive of an ICS. This paper provides a new paradigm of ISMS for ICSs, which will be shown to be more suitable than the existing ISMS.

AB - Organizations make use of important information in day-to-day business. Protecting sensitive information is imperative and must be managed. Companies in many parts of the world protect sensitive information using the international standard known as the information security management system (ISMS). ISO 27000 series is the international standard ISMS used to protect confidentiality, integrity, and availability of sensitive information. While an ISMS based on ISO 27000 series has no particular flaws for general information systems, it is unfit to manage sensitive information for industrial control systems (ICSs) because the first priority of industrial control is safety of the system. Therefore, a new information security management system based on confidentiality, integrity, and availability as well as safety is required for ICSs. This new ISMS must be mutually exclusive of an ICS. This paper provides a new paradigm of ISMS for ICSs, which will be shown to be more suitable than the existing ISMS.

UR - http://www.scopus.com/inward/record.url?scp=84928211583&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84928211583&partnerID=8YFLogxK

U2 - 10.1155/2014/348305

DO - 10.1155/2014/348305

M3 - Article

VL - 2014

SP - 348305

JO - Scientific World Journal

JF - Scientific World Journal

SN - 2356-6140

ER -