Information security management guideline for small and midsize enterprises

Abstract

The development objective of this thesis was to create effective information security management guideline for a small and midsize enterprise. Thesis used a semistructured interview as a research method alongside theoretical framework and the results were analyzed and compared to best practices. By comparing results to best practices was this thesis able to have solid conclusions regarding knowledgebase of the company and the readiness to improve, maintain and monitor their information security procedures as the industry standard would recommend.

The main purpose of the thesis was to create information security management guideline for the company to follow. By following these baseline steps that have been introduced in guideline and by reading the thesis’, should the company have an adequate skill to develop, maintain, improve and monitor their information security in a basic level.