Information Security: Policy, Processes, and Practices (Advances in Management Information Systems)

INFORMATION SECURITY......Page 2
CONTENTS......Page 6
SERIES EDITOR’S INTRODUCTION......Page 8
REFERENCES......Page 10
PART I THE TERRAIN OF INFORMATION SECURITY......Page 14
CHAPTER 1 FRAMING THE INFORMATION SECURITY PROCESS IN MODERN SOCIETY......Page 16
PARTS AND CHAPTERS......Page 17
THE LOGIC OF THE CHAPTERS......Page 20
CONCLUSION......Page 22
NOTES......Page 23
PART II SECURITY PROCESSES FOR ORGANIZATIONAL INFORMATION SYSTEMS......Page 24
INTRODUCTION......Page 26
THREE VIEWS OF STRATEGY PROCESSES FOR INFORMATION SECURITY......Page 28
GOALS ASSESSMENT......Page 35
SECURITY STRATEGY-SETTING PRODUCTS......Page 39
ORGANIZING THE STRATEGY-SETTING PROCESS......Page 43
MARSHALLING THE COMPETENCIES......Page 45
TOP-DOWN STRATEGY-SETTING PROCESS......Page 49
FEDERAL STRATEGY-SETTING PROCESS......Page 51
SUMMARY AND OPEN QUESTIONS......Page 53
REFERENCES......Page 55
CHAPTER 3 IT GOVERNANCE AND ORGANIZATIONAL DESIGN FOR SECURITY MANAGEMENT......Page 57
ORGANIZATIONAL STRUCTURE AND DESIGN......Page 58
GOVERNANCE......Page 60
INFORMATION SYSTEMS CENTRALIZATION AND DECENTRALIZATION......Page 63
THE CASE OF “TECHUNIT” VERSUS “MEDUNIT”......Page 66
CONCLUSIONS AND DIRECTIONS FOR FUTURE RESEARCH......Page 76
REFERENCES......Page 78
INTRODUCTION......Page 80
CURRENT PRACTICES IN RISK ASSESSMENT......Page 81
THE TVA MODEL FOR RISK ASSESSMENT......Page 86
ASSET IDENTIFICATION......Page 87
EXTENDING THE TVA MATRIX......Page 101
DOCUMENTING RESULTS OF RISK ASSESSMENT......Page 111
PREVIOUS RESEARCH IN THE FIELD OF RISK ASSESSMENT......Page 115
REFERENCES......Page 121
INTRODUCTION......Page 123
RISK MANAGEMENT: FOUR BASIC TYPES OF TREATMENTS......Page 124
ROLE OF RISK ANALYSIS AND SECURITY STANDARDS......Page 127
PORTFOLIOS OF RISKS AND RISK TREATMENTS......Page 129
FUTURE RESEARCH......Page 131
REFERENCES......Page 133
INTRODUCTION......Page 134
INFORMATION SECURITY POLICY......Page 135
INFORMATION SECURITY EDUCATION......Page 150
REFERENCES......Page 160
INTRODUCTION......Page 163
KEY DEFINITIONS......Page 164
MTBU......Page 167
RISK AND RISK ASSESSMENT......Page 168
BEST PRACTICES......Page 172
GENERIC PRINCIPLES AND SOLUTIONS......Page 173
MODELS FOR BCP/DR......Page 174
NEW STUDIES TO INCREASE UNDERSTANDING OF BCP/DR......Page 177
REFERENCES......Page 181
PART III PROCESSES FOR SECURING THE EXTRA-ORGANIZATIONAL SETTING......Page 184
INTRODUCTION......Page 186
U.S. INFORMATION SECURITY POLICY EVOLUTION......Page 187
NATIONAL INFORMATION SECURITY POLICY AS OF 2005......Page 195
CURRENT THREATS AND VULNERABILITIES......Page 199
FUTURE DIRECTIONS FOR NATIONAL INFORMATION SECURITY POLICY......Page 200
NOTES......Page 203
REFERENCES......Page 204
AN EMERGING LANDSCAPE......Page 207
INTERNATIONAL INTERGOVERNMENTAL ORGANIZATIONS......Page 208
REGIONAL INTERGOVERNMENTAL ORGANIZATIONS......Page 219
PRIVATE-PUBLIC ORGANIZATIONS......Page 223
MAKING GLOBAL CYBERSPACE MORE SECURE . . . ?......Page 226
SUGGESTED INTERNATIONAL CYBERSECURITY RESEARCH TOPICS......Page 228
CONCLUSIONS......Page 231
NOTES......Page 232
REFERENCES......Page 233
PART IV FORCES AND RESEARCH LEADING TO FUTURE INFORMATION SECURITY PROCESSES......Page 240
INTRODUCTION......Page 242
APPLICATIONS AND TECHNOLOGY......Page 243
CASE STUDIES......Page 249
ELEMENTS OF A SECURITY MANAGEMENT STRATEGY FOR UBICOMP APPLICATIONS......Page 251
SECURITY STRATEGY DESIGN AND MANAGEMENT DESIGN......Page 263
FUTURE RESEARCH DIRECTIONS......Page 268
NOTES......Page 269
REFERENCES......Page 270
INTRODUCTION......Page 274
FUTURE RESEARCH......Page 275
CONCLUSION......Page 280
REFERENCES......Page 281
EDITORS AND CONTRIBUTORS......Page 282
SERIES EDITOR......Page 286
INDEX......Page 288