Enhancing Enterprise IT Security with a Visualization-Based Process Framework

Abstract

This work presents a process framework for security visualization that supports organizational knowledge generation, improves the usability of IT operative tasks, and improves the manageability of data and devices. The framework, as it was built, and how it can be used is described. The framework provides detailed instructions, makes the current status of the environment visible, and demands participation from stakeholders. With this concept, the quality of the used data is improved systematically, and also the overall IT security level of the organization. It consists of a visualization process (ask, manage data, visualize, interact) and a data management process (define data, acquire data, analyze data, ensure data quality, dispose or reuse data). This is illustrated with a proof of concept process run on vulnerability management. Besides, an implementation guide is provided in order to support the adaption of the process framework.