Author
Sergiy Dotsenko; Oleg Illiashenko; Sergii Kamenskyi; Vyacheslav Kharchenko
Published in
Information & Security: An International Journal 43, no. 3 (2019): 305-317.
Keywords
information security, information technologies, IT security, knowledge management, security standards
Open Access
YES
Abstract
The paper presents analysis of existing knowledge management models and justification for introducing an integrated model of knowledge management for both industry and academia. It is proposed to build such a model using well-known standards of IT security – common criteria and methodology for IT security evaluation. The model of knowledge management is elaborated by analysing the content of the relevant elements of standards and establishing the knowledge content that determines the forms of relations between them. The authors propose the application of an architecture of four-factor models towards the formation of knowledge management models in the organization of the information security management system in accordance with the standards of the series ISO/ IEC 27000.