References Reynolds, D., Rabey, K., Polemi, N.: Analysing mes needs and expectations in the area of information security. ENISA report (2008), available at . Polemi N., Ntouskas T., Issues and Proposals in the IT Security Management of “Open Commercial The S-PORT National Case”. In: D. Gritzalis, S. Furnell, and M. Theoharidou (Eds.): SEC 2012, IFIP AICT 376, pp. 567–572, 2012. Polemi, N.: Security Management of the ports’ information systems. ENISA Personal study. Available at (accessed August 2012). ISO/IEC. Information Technology - Security Techniques - Information Security Risk Management, ISO /IEC 27005, 2008. ISO/IEC. Information technology - Security techniques - Specification for an Information Security Management System, ISO/IEC 27001, 2005. ISO/IEC. Information technology - Security techniques - Code of practice for information security management, ISO/IEC 2005. ISO/IEC:17799: Information technology - security techniques - code of practice for information security management (2005), http://www.iso.org National Institute for Standards and Technology, Risk management for information technology systems, NIST Special Publication 800-30, USA, July 2002. OCTAVE Method Implementation Guide Version 2.0, Carnegie Mellon University, June 2001. Available at http://www.cert.org/octave/ (accessed December 2010). Alberts, Christopher & Dorofee, Audrey. Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Method Implementation Guide, v2.0. Software Engineering Institute, Carnegie Mellon University, 2001. . Insight Consulting, CRAMM User Guide, Issue 5.1, United Kingdom, 2005. Expression of Needs and Identification of Security Objectives PREMIER MINISTRE Secrétariat général de la défense nationale Direction centrale de la sécurité des systèmes d’information Sous-direction des opérations Bureau conseil. Available BSI Standard 100-1. (2005). Information Security Management Systems (ISMS). Retrieved May 2008, from www.bsi.bund.de BSI Standard 100-2. (2005). IT-Grundszchutz methodology. Retrieved May 2008, from BSI Standard 100-3. (2005). Risk analysis based on IT-Grundszchutz. Retrieved May 2008, from
References Reynolds, D., Rabey, K., Polemi, N.: Analysing mes needs and expectations in the area of information security. ENISA report (2008), available at . Polemi N., Ntouskas T., “Open Issues and Proposals in the IT Security Management of Commercial The S-PORT National Case”. In: D. Gritzalis, S. Furnell, and M. Theoharidou (Eds.): SEC 2012, IFIP AICT 376, pp. 567–572, 2012. Polemi, N.: Security Management of the ports’ information systems. ENISA Personal study. Available at (accessed August 2012). ISO/IEC. Information Technology - Security Techniques - Information Security Risk Management, ISO /IEC 27005, 2008. ISO/IEC. Information technology - Security techniques - Specification for an Information Security Management System, ISO/IEC 27001, 2005. ISO/IEC. Information technology - Security techniques - Code of practice for information security management, ISO/IEC 2005. ISO/IEC:17799: Information technology - security techniques - code of practice for information security management (2005), http://www.iso.org National Institute for Standards and Technology, Risk management for information technology systems, NIST Special Publication 800-30, USA, July 2002. OCTAVE Method Implementation Guide Version 2.0, Carnegie Mellon University, June 2001. Available at http://www.cert.org/octave/ (accessed December 2010). Alberts, Christopher & Dorofee, Audrey. Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) Method Implementation Guide, v2.0. Software Engineering Institute, Carnegie Mellon University, 2001. . Insight Consulting, CRAMM User Guide, Issue 5.1, United Kingdom, 2005. Expression of Needs and Identification of Security Objectives PREMIER MINISTRE Secrétariat général de la défense nationale Direction centrale de la sécurité des systèmes d’information Sous-direction des opérations Bureau conseil. Available BSI Standard 100-1. (2005). Information Security Management Systems (ISMS). Retrieved May 2008, from www.bsi.bund.de BSI Standard 100-2. (2005). IT-Grundszchutz methodology. Retrieved May 2008, from BSI Standard 100-3. (2005). Risk analysis based on IT-Grundszchutz. Retrieved May 2008, from
D2.1_UPRC.docx