20.500.12556/DKUM-91807 A real-world information security performance assessment using a multidimensional socio-technical approach Measuring the performance of information security is an essential part of the information security management system within organisations. Studies in the past mainly focused on establishing qualitative measurement approaches. Since these can lead to ambiguous conclusions, quantitative metrics are being increasingly proposed as a useful alternative. Nevertheless, the literature on quantitative approaches remains scarce. Thus, studies on the evaluation of information security performance are challenging, especially since many approaches are not tested in organisational settings. The paper aims to validate the model used for evaluating the performance of information security management system through a multidimensional socio-technical approach, in a real-world settings among medium-sized enterprises in Slovenia. The results indicate that information security is strategically defined and compliant, however, measures are primarily implemented at technical and operational levels, while its strategic management remains underdeveloped. We found that the biggest issues are related to information resources and risk management, where information security measurement-related activities proved to be particularly problematic. Even though enterprises do possess certain information security capabilities and are aware of the importance of information security, their current practices make it difficult for them to keep up with the fast-paced technological and security trends. information security information security management organisations qualitative measurement informacijska varnost organizacije učinkovitost merjenje varnostni menedžment true true true Public Library of Science Angleški jezik Slovenski jezik Znanstveno delo 2025-02-07 14:24:34 2025-02-07 14:34:59 2025-02-08 03:12:16 0000-00-00 00:00:00 2020 0 0 Str. 1-28 št. 9, št. članka 0238739 Letn. 15 2020 0000-00-00 Zaloznikova Objavljeno NiDoloceno 2020-05-22 2020-08-21 2020-09-08 004.056(045) 27680003 10.1371/journal.pone.0238739 1932-6203 Prislan-2020-A_real-world_information_security.pdf Prislan-2020-A_real-world_information_security.pdf 1 4D6D5B6B997B7AE302DE8B94D0A5FDC7 ce1f72b8c59a73fa6d94c6e985eca414e68d1df437e0493b496b5fec1be65d4f 2967948d-e558-11ef-a41d-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=188513 https://doi.org/10.1371/journal.pone.0238739 0 df55c082-e556-11ef-a41d-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=188512 Fakulteta za varnostne vede 0 0 0