2011 · 13 citations · 20 references
BusinessInformation SystemsInformation TechnologyBusiness Process ManagementCrisis ManagementEmergency ManagementData SecurityDisaster RecoveryIncident ManagementRescue OperationsResilience EngineeringSecurity ManagementBusiness Process NotationBusiness Process OrchestrationCatastrophic EventsDisaster Recovery ManagementEmergency Management Information SystemsIncident Response ProcessesRescueWorst-case Scenario
Weaving together information spread over several public and private organizations is crucial for managing catastrophic events and for realizing resilient social infrastructures. While beneficial in emergencies, an unlimited access to (sensitive) data is usually defined as the worst case in any privacy or IT security scenario. As a solution to this tradeoff, the transferability of successful methods and tools known from business process and workflow management to rescue processes is discussed. The resulting framework as well as the identified research questions do not aim at generating "pure" technical security but at reducing the probability of misuse and, thus, providing a sound technical basis for a social discussion on resilient infrastructures.
20
Towards information security behavioural compliance
Cheryl Vroom, Rossouw von Solms · Computers & Security · 2004 · 411 citations
Alexander Pretschner, Manuel Hilty, David Basin · Communications of the ACM · 2006 · 241 citations