Protecting our critical assets: a management approach to Information Security

The results provide a significant contribution to theory and practice, especially for Information Security Managers. The main contributions of the research are: 1. the creation of a Critical Success Factors model illustrating the experts' perceptions concerning the objectives, resources, threats, and actors for designing,implementing and operating an ISMS; the development and application of a new maturity model to measure information securityin an organisation, 2. the Information Security Quotient that allows organisations to quantitatively score their information security posture; and 3. the development of a Tactical Security Management framework to assist organisations with the implementation, operation,and certification of their ISMS.