Corporate Information Security

Information security has developed from a specialist issue into a fixed item on the management agenda. Due to the growing integration of information technology in operating processes, security is now increasingly embedded in the tasks and responsibilities of existing organisations. This article explains how organisations can adopt a structural approach to information security, from assessment and policy formulation to planning and implementation. Three case studies highlight specific aspects of information security.