امیرهوشنگ تاج فر - Assistant Prof., Payam Noor University, Iran
محمد محمودی میمند - Associate Prof., Department of Business Administration & MBA, Payame Noor University, PO Box ۱۹۳۹۵-۳۶۹۷ Tehran, Iran
فاطمه رضاسلطانی - MSc. Student, Information Technology Management, Payam Noor University, Tehran, Iran
پوریا رضاسلطانی - Ph.D. Candiate, University of Tehran, Iran

As information has the role of organization asset, its protection is the key to the survival of any organization. Information Security Management System (ISMS) defines protection of information in three specific concepts: information confidentiality, accuracy, and availability. Many failures in implementing ISMS rooted in organizational problems and lack of attention to the state of readiness of the organization before implementation. A descriptive design (method) was used to perform the study. Barriers to implementing ISMS were ranked based on analytical hierarchical process and organization’s readiness rate to implement ISMS was determined by questionnaire. The results indicate that the non-compliance of organizational structure with the ISMS requirements is the most important barrier and employee’s fear of difficulties of these processes is lowest important barrier. In addition, the readiness rate of exploration management in the ISMS implementation is lower than average.

Hierarchical Analysis, implementation barriers, information security management system, readiness assessments