Selection of an Alternative Method for Establishing Security Levels

Abstract

On July 14, 2014 in Journal of Applied Security Research an article was published named “Security Levels of Critical Infrastructure.” It presented a vision for the creation of a unified methodology for integrating existing standardization, normative, and institutional tools to build higher levels of security for critical infrastructures. But this is only the frame to be filled with content. This content, however, may be the result of different approaches to formulate the packages of requirements for the separate elements of an integrated security system for the organizations, detailed in the generally accepted levels of security and protection. The focus of this publication is to show the positive and negative effects of the choice of the alternative to create a single document, with the standardization requirements for building a comprehensive, unified system for security and protection of sites of the critical infrastructure based on a clearly defined and documentary secured matrix of ascending levels of security for the organizations.

KEYWORDS:

• Security levels of critical infrastructure
• standardization document for security levels of critical infrastructure
• alternative approaches
• integrated security management system

Notes

¹For the purpose of avoiding repetition, the term “organization” (“organizations”) will be used instead of “critical infrastructure.”

²In 2012, the International Organization for Standardization accepted the structure of ISO 9000 as standard in creating standardization documents regulating the requirements for the subsystems management.