Information security embedded in the design of telematics systems

Abstract

As organizations become increasingly dependent on their telematics systems, they become more vulnerable to interruptions and breakdowns of these systems. Most organizations only realize this dependency, and the exact nature of their vulnerability, once the telematics systems are in place. This often results in the ad hoc addition of safeguards, which causes operational problems. The most important cause of this phenomenon is the fact that information security requirements were never an issue during the design of most systems. In this paper we propose that requirements for information security should be integrated in the design process in an early phase. The benefit of this is that information security will become an integral part of the system. We present an approach that addresses the issue of security requirements in all stages of the design process. For each stage we discuss how these information security requirements can be embedded in that stage.