Grupo Alarcos · Conference paper · 2009
MMSM-SME: Methodology for the Management of Security and its Maturity in SME
Luis Enrique Sánchez Crespo, Antonio Santos-Olmo Parra, Eduardo Fernández-Medina Patón, Mario Piattini Velthuis
Due to the growing dependence of information society on Information and Communication Technologies (ICTs), the need to protect information is getting more and more important for enterprises. In this context, Information Security Management Systems (ISMSs), that are very important for the stability of the information systems of enterprises, have arisen. The fact of having these systems available has become more and more vital for the evolution of Small and Medium-Sized Enterprises (SMEs). In this article, we show the methodology that we have developed for the development, implementation and maintenance of a security management system, adapted for the needs and resources available for SMEs. This approach is being directly applied to real case studies and thus, we are obtaining a constant improvement in its application.