House of Security: Locale, Roles and Resources for Ensuring Information Security
2006
In this paper we redefine information security by extending its definition in three salient avenues: locale (beyond the boundary of an enterprise to include partner organizations), role (beyond the information custodians' view to include information consumers' and managers' views), and resource (beyond technical dimensions to include managerial dimensions). Based on our definition, we develop a model of information security, which we call the House of Security. This model has eight constructs, Vulnerability, Accessibility, Confidentiality, IT Resources for Security, Financial Resources for Security, Business Strategy for Security, Security Policy and Procedures, and Security Culture. We have developed a questionnaire to measure the assessment and importance of information security along these eight aspects. The questionnaire covers multiple locales and questionnaire respondents cover multiple roles. Data collection is currently in process. Results from our analysis of the collected data will be ready for presentation at the conference.
Keywords:
- Security through obscurity
- Information security audit
- Security culture
- Knowledge management
- Security convergence
- Computer science
- Public relations
- Certified Information Security Manager
- Certified Information Systems Security Professional
- Security information and event management
- Cloud computing security
- Information security
- Internet privacy
- Security service
- Asset (computer security)
- Information security management
- Correction
- Source
- Cite
- Save
- Machine Reading By IdeaReader
16
References
3
Citations
NaN
KQI