The conference series ICISS (International Conference on Information Systems Security), held annually, provides a forum for disseminating the latest research results in information and systems security. ICISS 2013 is the ninth in the series. The acceptance ratio of the past few conferences has averaged less than 30%, and the proceedings have been published as part of the Springer Verlag series of Lecture Notes in Computer Science. ICISS 2013 will be held in Kolkata, India from December 16 to 20, 2013. Kolkata is the largest metropolis of the state of West Bengal and is still considered to be a major intellectual and cultural hub of India. Kolkata hosts some of the finest educational institutions in India and has been the home to renowned scientists, reformers, artists, poets, and musicians. ICISS 2013 encourages submissions from academia, industry and government addressing theoretical and practical problems in information and systems security and related areas.