Is the practice of ensuring that service availability and performance are maintained at a sufficient level in case of a disaster.
Published in Chapter:
The Risks Associated With ITIL Information Security Management in Micro Companies
Sérgio Sargo Lopes (Polytechnic Higher Institute of Gaya, Portugal & LE@D Open University, Portugal), Mário Dias Lousã (Polytechnic Higher Institute of Gaya, Portugal), and Fernando Almeida (Polytechnic Higher Institute of Gaya, Portugal & INESC TEC, Portugal)
Copyright: © 2023
|Pages: 36
DOI: 10.4018/978-1-6684-6581-3.ch001
Abstract
Information security has become a necessity for all organizations. ITIL, designed for large organizations, has also been gradually adopted by smaller companies and has incorporated practices related to information security management (ISM). This study aims to understand the main risks associated with ISM, considering the context of micro companies. For this purpose, a qualitative model was built based on four case studies of micro companies in the information technology industry. The results show that companies are concerned about information security, given the growth of external threats. However, these companies have a lack of commitment, of resources, and of knowledge that hinder the implementation of an ISM policy. Therefore, it is evident that the challenge of ISM is demanding and should be addressed, considering that the security of an organization should be analyzed in a holistic context, where all perspectives should be considered to reflect the multidisciplinary nature of security.