The Metasystem

This chapter outlines a system or architecture helping to manage IT service security. It defines several areas of activities, each of which corresponds to general, business-driven objectives. Each area is described in terms of activities or tasks together with their inputs and outputs. The management system shows the interrelations between the areas of activities and forms an organizational schema creating the basis for comprehensively managing IT service security while taking the interests and responsibilities of the parties involved and their division of labor into account. The goal of implementing the schema is to create the necessary conditions for effectiveness (reach all goals with consistent quality) and efficiency (reduce effort and costs).