The idea behind presenting table I is to demonstrate some
of the identified strengths derived from the selected
frameworks which will be incorporated into the ITSRB
approach. The four categories of frameworks which IT
security frameworks may fall into are: strategic, technical,
compliance and high-level guidelines [4].
For example, COBIT focuses on 'what' must be done
rather than 'how' it must be done and is strong in providing
high-level integration required in the cohesion of various IT
security programmes [4]. Likewise, ITTL is more technical and
detailed in nature and focuses on 'how' things should be done
rather than the 'what' should be in place [4].
It can be seen in Table I that Octave and COBIT
frameworks are applied at a strategic level while IS027001/2,
ITlL and ISF are applied at a tactical level. In fmding a good
approach, a combination of "what" and "how" as well as a
combination of applicability levels (i.e. strategic, tactical and
operational) should be aimed for. These principles form the
selected frameworks, are also used to guide the ITSRB
approach's principles.