Enterprise Engineering in Business Information Security: A case study & expert validation in Security, Risk and Compliance artefact engineering.

Implementing and maintaining Business Information Security (BIS) is cumbersome. This paper reflects on ten years of Design Science Research (DSR) on BIS and describes the design and engineering of an artefact which can emancipate boards from silo-based spreadsheet management and improve their visibility, control and assurance via an integrated dash-boarding and reporting tool.