European Journal of Information Systems · 1996 · 131 citations · 9 references
BusinessComputer ScienceInformation SystemsComputer SecurityInformation Security ManagementSecurity GovernanceInformation Security ControlsInformation Security GovernanceInformation Security PolicyInformation Systems GovernanceSecurity ControlsSecurity ManagementSecurity Governance StructuresSecurity ResponsibilitiesSecurity Risk Management
Our research suggests an improved theoretical and conceptual foundation for analysing information systems security. We argue that an analysis of structures of responsibility in organizations leads to the development of secure information systems. The paper surveys the existing approaches to security and proposes an alternative perspective for viewing organizational and security issues.
9
Santosh Chokhani · Communications of the ACM · 1992 · 54 citations · Full text
Risk analysis for Information Systems
David G. Birch, Neil A. McEvoy · Journal of Information Technology · 1992 · 51 citations