Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks
A surge in successful Information Security (IS) breaches targeting Research and Education (R&E) institutions highlights a pressing need for enhanced protection. Addressing this, a consortium of European National Research and Education Network (NREN) organizations has developed a unified IS frame...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2023-10-01
|
| Series: | Future Internet |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1999-5903/15/10/330 |
| _version_ | 1797626741416525824 |
|---|---|
| author | Šarūnas Grigaliūnas Michael Schmidt Rasa Brūzgienė Panayiota Smyrli Vladislav Bidikov |
| author_facet | Šarūnas Grigaliūnas Michael Schmidt Rasa Brūzgienė Panayiota Smyrli Vladislav Bidikov |
| author_sort | Šarūnas Grigaliūnas |
| collection | DOAJ |
| description | A surge in successful Information Security (IS) breaches targeting Research and Education (R&E) institutions highlights a pressing need for enhanced protection. Addressing this, a consortium of European National Research and Education Network (NREN) organizations has developed a unified IS framework. This paper aims to introduce the Security Baseline for NRENs and a security maturity model tailored for R&E entities, derived from established security best practices to meet the specific needs of NRENs, universities, and various research institutions. The models currently in existence do not possess a system to smoothly correlate varying requirement tiers with distinct user groups or scenarios, baseline standards, and existing legislative actions. This segmentation poses a significant hurdle to the community’s capacity to guarantee consistency, congruency, and thorough compliance with a cohesive array of security standards and regulations. By employing taxonomical engineering principles, a mapping of baseline requirements to other security frameworks and regulations has been established. This reveals a correlation across most regulations impacting R&E institutions and uncovers an overlap in the high-level requirements, which is beneficial for the implementation of multiple standards. Consequently, organizations can systematically compare diverse security requirements, pinpoint gaps in their strategy, and formulate a roadmap to bolster their security initiatives. |
| first_indexed | 2024-03-11T10:14:31Z |
| format | Article |
| id | doaj.art-28721a667cc94a52baec3cbef4009d2b |
| institution | Directory Open Access Journal |
| issn | 1999-5903 |
| language | English |
| last_indexed | 2024-03-11T10:14:31Z |
| publishDate | 2023-10-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Future Internet |
| spelling | doaj.art-28721a667cc94a52baec3cbef4009d2b2023-11-16T10:28:26ZengMDPI AGFuture Internet1999-59032023-10-01151033010.3390/fi15100330Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory FrameworksŠarūnas Grigaliūnas0Michael Schmidt1Rasa Brūzgienė2Panayiota Smyrli3Vladislav Bidikov4Department of Computer Sciences, Kaunas University of Technology, Studentu Str. 50, 51368 Kaunas, LithuaniaLeibniz Supercomputing Centre, Boltzmann Str. 1, 85748 Garching, GermanyDepartment of Computer Sciences, Kaunas University of Technology, Studentu Str. 50, 51368 Kaunas, LithuaniaCyprus Research & Academic Network, 33 Neas Egkomis, Egkomi, Nicosia 2409, CyprusFaculty of Computer Science and Engineering, Ss. Cyril and Methodius University in Skopje, “Rugjer Boshkovikj” 16, P.O. Box 393, 1000 Skopje, North MacedoniaA surge in successful Information Security (IS) breaches targeting Research and Education (R&E) institutions highlights a pressing need for enhanced protection. Addressing this, a consortium of European National Research and Education Network (NREN) organizations has developed a unified IS framework. This paper aims to introduce the Security Baseline for NRENs and a security maturity model tailored for R&E entities, derived from established security best practices to meet the specific needs of NRENs, universities, and various research institutions. The models currently in existence do not possess a system to smoothly correlate varying requirement tiers with distinct user groups or scenarios, baseline standards, and existing legislative actions. This segmentation poses a significant hurdle to the community’s capacity to guarantee consistency, congruency, and thorough compliance with a cohesive array of security standards and regulations. By employing taxonomical engineering principles, a mapping of baseline requirements to other security frameworks and regulations has been established. This reveals a correlation across most regulations impacting R&E institutions and uncovers an overlap in the high-level requirements, which is beneficial for the implementation of multiple standards. Consequently, organizations can systematically compare diverse security requirements, pinpoint gaps in their strategy, and formulate a roadmap to bolster their security initiatives.https://www.mdpi.com/1999-5903/15/10/330information security managementsecurity maturity modelresearch and educationtaxonomysecurity baseline |
| spellingShingle | Šarūnas Grigaliūnas Michael Schmidt Rasa Brūzgienė Panayiota Smyrli Vladislav Bidikov Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks Future Internet information security management security maturity model research and education taxonomy security baseline |
| title | Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks |
| title_full | Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks |
| title_fullStr | Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks |
| title_full_unstemmed | Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks |
| title_short | Leveraging Taxonomical Engineering for Security Baseline Compliance in International Regulatory Frameworks |
| title_sort | leveraging taxonomical engineering for security baseline compliance in international regulatory frameworks |
| topic | information security management security maturity model research and education taxonomy security baseline |
| url | https://www.mdpi.com/1999-5903/15/10/330 |
| work_keys_str_mv | AT sarunasgrigaliunas leveragingtaxonomicalengineeringforsecuritybaselinecomplianceininternationalregulatoryframeworks AT michaelschmidt leveragingtaxonomicalengineeringforsecuritybaselinecomplianceininternationalregulatoryframeworks AT rasabruzgiene leveragingtaxonomicalengineeringforsecuritybaselinecomplianceininternationalregulatoryframeworks AT panayiotasmyrli leveragingtaxonomicalengineeringforsecuritybaselinecomplianceininternationalregulatoryframeworks AT vladislavbidikov leveragingtaxonomicalengineeringforsecuritybaselinecomplianceininternationalregulatoryframeworks |