Managing e-enterprise security : an integrated approach

An e-enterprise is heavily dependent on computer networks and electronic data and information to run their key business processes. The threats to security have become a paramount concern in an enterprise. Any compromise of security objectives could lead to significant damage to business. This paper defines security objectives and identifies the major risks associated with e-enterprise security. The paper is intended to propose a framework to help prepare for challenges and issues in enterprise security. The paper uses the new version of the ISO/IEC 17799 as a foundation for establishing security framework. The proposed framework stresses security management responsibility with addressing of auditing and compliance with applicable laws and regulations. Given the international and borderless nature of e-enterprises, the framework requires cooperation with suppliers, business partners and customers. This paper contributes an integrated approach towards securing e-enterprise security.