Balanced integration of information security into business management

Abstract

Information is a basic building block of our modern society and needs to be protected. This work approaches the question of information security from the viewpoint of business management. Information security is not a separate entity, isolated from other business practices: rather, it constitutes an integral part of the modern business management system, and assists the organization to achieve and maintain a competitive edge over its business rivals. The aim for business performance, including information security, is superiority over competitors. Fulfilling only the minimum requirements or achieving mediocrity is not enough. Since modern businesses are based on a process approach, also information security should be integrated into the management of business processes.