An analytical study of information security management in the public sector of Albania

Abstract

Public sector organizations are in the early stages of adopting information security management in Albania. Organizations who have adopted these processes have underestimated information security within the organisation framework. This study specifically investigates the information security management within public sector organizations. Its objective is to organise local organizations with international standards and frameworks in terms of integrating information security management and information technology audits, risks, and control measures. A survey of selected organizations is completed and results are presented in this paper identifying the maturity level of information security management in Albanian organizations.