Information Systems Security · 2000 · 45 citations · 0 references
ComputingInformation SystemsInformation TechnologyEnterprise ArchitectureSecurity ArchitectureSecurity PolicyEnterprise Risk ManagementInformation Security GovernanceInformation Security PolicySecurity ControlsSecurity ManagementSecurity StrategyInformation Security AssuranceInformation Security Management SystemsInformation Technology Risk AnalysisSecurity Governance FrameworksSecurity Risk Management
Organizations increasingly treat information as their most valuable asset, and the rapid expansion of electronic business and network connectivity exposes them to widespread, fast‑moving security risks. The study seeks an effective, proven information‑security model that aligns with business objectives while addressing people, policy, and technology.
Abstract An organization's information is rapidly becoming its most valuable asset. In addition, in order to be successful in today's global economy, organizations must conduct business electronically. Suppliers, vendors, business partners, and customers are being connected to the organization's internal networks daily. With these advances in technology and business methods, risks are introduced on a wider scale and at a quicker pace than ever before. One of the major challenges an organization faces is to find and employ an effective and proven model for information security. Not only does this model have to fit the organization's business, it must also address many different facets: people, policy, and technology.