Environment

Abstract

The Enterprise Security Architecture for Reliable ICT Services (ESARIS) does not organize all security-related activities in a corporation. For example, all larger corporations including ICT Service Providers require an Information Security Management System (ISMS) for steering the security management by defining the organizational structure and procedures used. Such systems form the so-called Frameworks for ESARIS in which ESARIS is embedded (Sect. 2.1). ESARIS concerns only the security of ICT services and not of the corporation as a whole. The two perspectives corporate and ICT service security are discussed in Sect. 2.2 and a general governance model is given further clarifying interdependences with respect of using ESARIS.