Maturity models are a widely used concept for measuring information security. The idea is to
systematically evaluate the maturity of security-relevant processes in an organisation. This …

Abstract Information security risk assessment frameworks support decision-makers in
assessing and understanding the risks their organisation is exposed to. However, there is a …

Identifying security risks in organizations and also determining their severity in order to
select appropriate security countermeasures is of great importance in organizations. In the …

Along with other requirements, the German critical infrastructure programme required critical
infrastructure providers, ie energy providers to implement an ISMS. We used the unique …

This document presents the research results on usable security and privacy, and on usability
of different security solutions, that were acquired in the context of Cyber Security for Europe …

IT security is a cost-intensive aspect of SMEs. Critical infrastructures, in particular, are
increasingly dependent on good IT security. Increasing security, however, can limit the …