Ang, Wee Horng
[Author]
;
Lee, Yang
[Other];
Madnick, Stuart
[Other];
Mistree, Dinsha
[Other];
Siegel, Michael
[Other];
Strong, Diane M.
[Other];
Wang, Richard Y.
[Other];
Yao, Chrisy
[Other]
House of Security
: Locale, Roles and Resources for Ensuring Information Security
Published in:MIT Sloan Research Paper ; No. 4623-06
Extent:
1 Online-Ressource (7 p)
Language:
English
DOI:
10.2139/ssrn.926627
Identifier:
Origination:
Footnote:
Nach Informationen von SSRN wurde die ursprüngliche Fassung des Dokuments August 2006 erstellt
Description:
In this paper we redefine information security by extending its definition in three salient avenues: locale (beyond the boundary of an enterprise to include partner organizations), role (beyond the information custodians' view to include information consumers' and managers' views), and resource (beyond technical dimensions to include managerial dimensions). Based on our definition, we develop a model of information security, which we call the House of Security. This model has eight constructs, Vulnerability, Accessibility, Confidentiality, IT Resources for Security, Financial Resources for Security, Business Strategy for Security, Security Policy and Procedures, and Security Culture. We have developed a questionnaire to measure the assessment and importance of information security along these eight aspects. The questionnaire covers multiple locales and questionnaire respondents cover multiple roles. Data collection is currently in process. Results from our analysis of the collected data will be ready for presentation at the conference