Information Security Management Metamodel (ISMM) validation and verification through frequency-based selection technique

Abstract

Information protection considers as a vital planned topic in organizational management. Information Security Management (ISM) is a regular policy and procedure of efficiently managing an organization's information security threats and hazards. However, the successful of security information management still largely depends on the participation of domain users and stakeholders in the security phases and securing the information system. Problem in a management of ISM commonly arise due to many domain users and stakeholders still lacking in term of knowledge understanding about ISM issues that would allow them to play an essential role in the implementation and operation of ISM. Therefore, in this paper the authors developed a metamodel to overcome this issue called ISM Metamodel (ISMM). Thus, this paper aims to validate the ISMM using a Frequency-based Selection (FBS) technique. Results showed that four missing important concepts and excluded two less critical concepts after the FBS validation against the initial ISMM v1.0.