Integral information security management model for Lithuanian state institutions

The information security management research analysis shows that for a long time the technological solutions of research problems have dominated, but lately more relevant have become the human, economic and other issues, and there is a need for a more managerial approach. It is obvious that the current practice of information security management tools is no longer adequate for information security management. As a new instrument to address this problem, a theoretical integral information security governance model could be used. It combines the information security management and information management tools. The article aims to discuss empirical study as a theoretical integral information security management model that could be applied in practice. The practical applicability of the model was checked in in the Lithuanian state institutions. The paper discusses the study which has the following objectives: development of information security management in the Lithuanian state institutions evaluation approach, analysis of a case – the content analysis method to examine the legislative databases published in normative documents concerning information security management and proving the results through qualitative research (expert interview). T he paper presents the research results which confirm the validity of the integral theoretical information security management model and allows to assess information security management in the Lithuanian state institutions, to identify the shortcomings, to make suggestions for practical problem-solving and create conditions for the further research