A Business Process Engineering Based Approach towards Incorporating Security in the Design of Global Information Systems

IT security has become one of the key issues in information systems and the more global an information system, the bigger the threats it becomes exposed to. The technology to make information systems safe exists, however organisational and design aspects of such systems still need to be addressed. Security is usually not dealt with at the level of business processes and so security policies are typically not linked to system design and implementation. Even at the system level, security features are generally regarded as add on, rather as a key design issue. For this reason we introduce an approach for increasing the security levels of global information systems through business engineering technology