Tree Physiology · 2001 · 138 citations · 0 references
ComputingInformation SystemsInformation TechnologyComputer SecurityInformation Security ManagementSecurity PolicyInformation Security PolicySecurity AssuranceSecurity TrainingInformation Security AssuranceSecurity Assurance Frameworks
The paper extends McCumber’s 1991 model, a foundational research framework for INFOSEC, to address the evolution of the field into Information Assurance and the need for updated concepts. The extended model meets IA’s expanded needs by incorporating three temporal measures.
The model presented in this paper is an extension of work reported in 1991 by John McCumber. His model provided an abstract research and pedagogic framework for the profession. In the decade since McCumber prepared his model, Information Systems Security (INFOSEC) has evolved into Information Assurance (IA). Although the framework remains sound, the growth of the profession has suggested that changes are needed. This extension of the model accommodates the expanded needs of the IA discipline and include three temporal measures have been included.