Organization and process of information security system in management and implementation at ASELSAN

ORGANIZATION AND PROCESS OF INFORMATION SECURITYSYSTEM IN MANAGEMENT AND IMPLEMENTATION AT ASELSANSunay KAHRAMANEvery other day the enterprises and the information systems and networks theyposses are faced to threats and hazards that come from a variety of sources such ascomputer aided forgery, espionage, sabotage, destruction, fire and flood. Destructivesources such as computer viruses, computer piracy and denial of service attacksstarted to become more common, more ambitious and more complex.Information, like other economic assets, is a precious asset for an enterprise soit must be properly protected. Information security protects information from a broadhazard and treats areas to assure economic continuity, to minimize economic loss andto maximize return of opportunities and investments.Information security is provided by realizing a series of appropriateinspections such as policies, applications, methods, organizational structures andsoftware functions. These inspections should be constructed to guarantee that theenterprise meets certain security goals. For an effective security management systemBS 7799 Information Security system is prepared by BSI and it is used asinternational standards ISO 17799/ISO27001. The standards ISO 17799/ISO27001are translated to Turkish by Turkish Standards Institute and published as TurkishStandard in the title TS ISO/IEC 17799 and TS ISO/IEC 27001.In this thesis, the basic technology, policies and procedures required for theenterprises to establish an information security management system are explained inorder to determine the real risks and eliminate them. By means of this the jobprocesses, not only applied with technology but also with all enterprise workers,created as security management system the continuity will be provided robustly.