Comparative Study Between the Integration of ITIL and ISO / IEC 27001 with the Integration of COBIT and ISO / IEC 27001

Abstract

This paper tries to get a comparison between the integration of Information Technology Infrastructure Library (ITIL) and ISO / IEC 27001 with Integration of COBIT and ISO / IEC 27001. Factors to be considered are the increased level of information security services credibility, cost of the two standards integration of, the time of implementation, the multiple processes removal, and the increase in understanding between parts of the organization. A literature study is used as a research method. The results of the research can be a reference for organizations to consider two information security standards that will be integrated.

Information Security Management System Assessment Model by Integrating ISO 27002 and 27004

“…A paper review has been conducted on research papers focusing on the audit or assessment of information security management systems (ISMS). The results indicate that several other researchers have utilized existing frameworks such as COBIT5 [6], [18], [23], [24], System Security Engineering -Capability Maturity Model (SSE-CMM) [5], [20], ISO 27002:2013 [21], [22], Information Technology Infrastructure Library (ITIL) [15], and customized frameworks [1], [16], [25], [26].…”