Design Principles for Engineering Information Security in Single-Windows

When designing a Single-Window in which multiple organizations, both governmental and businesses, are involved, security is a key aspect. Nevertheless agreeing on security measures is difficult as organizations might have different security policies, heterogeneous systems design and various levels of ambitions. Principles are heuristics that can help to make sure information security is maintained in these multi-actor networks. Yet there is no overview of such information security principles available in the literature. This thesis proposes principles to help engineering a secure end-to-end information system in a business to government (B2G) setting. There are already a lot of frameworks on the topic of security, but they do not cover all security aspects of an information sharing network with public-private parties instead of one organization. The principles presented consolidate insights from literature and a case study.