Information systems risk management: Key concepts and business processes

Computers and Security

Volumn 19, Issue 3, 2000, Pages 234-242

  Finne, Thomas ^a  

^a PricewaterhouseCoopers ^*  (Finland)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEMS PROGRAMMING; RESPONSE TIME (COMPUTER SYSTEMS); RISK MANAGEMENT;

INFORMATION SYSTEMS RISK MANAGEMENT;

MANAGEMENT INFORMATION SYSTEMS;

EID: 0034159453     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0167-4048(00)88612-5     Document Type: Article

References (39)

1. Antill, Lyn, Selection of a research method: In Mumford, Enid et al. Research Methods in Information Systems: Proceedings of The IFIP WG 8.2 Colloquium, Manchester Business School. 1-3 September, 1984. Elsevier Science Publishers B.V (North- Holland). 1985, pp. 203-215.
2. Bequai Esquire, Angus, Computers + Business = Liabilities: A Preventive Guide for Management. Constitutional Institute of America, USA, 1984.
3. Bonczek, Robert H., Clyde W. Holsapple & Andrew B. Whinston, Foundations of Decision Support Systems, Academic Press, USA, 1981.
4. Brännback, Malin, Effective Strategic Market Management with Knowledge-Based Support Systems, Licentiate thesis, Institute for Advanced Management Systems Research (IAMSR), Åbo Akademi University, Åbo Akademis Tryckeri, Åbo, 1993.
5. Brännback, Malin, Strategic Decisions and Decision Support Systems, Doctoral thesis, Institute for Advanced Management Systems Research (IAMSR), Åbo Akademi University, Åbo Akademis Förlag, Åbo, 1996.
6. Caelli, William, Dennis Longley & Michael Shain, Infor-mation Security for Managers, Stockton Press, UK, 1989.
7. Checkland, Peter, Systems Thinking, Systems Practice, John Wiley & Sons, Great Britain, 1981.
8. nd Edition.
9. Davis, G. & M. Olson, Conceptual foundations, structure and development, Management Information Systems, McGraw-Hill, 1985. Quoted in March, Salvatore T. & Gerald F. Smith, Design and Natural Science Research on Information Technology. Decision Support Systems, Number 15, 1995, pp. 251-266.
10. Emory, William C, Business Research Methods, Richard D. Irwin, Inc. USA, 1976.
11. Finne, T, The information security chain in a company, Computers & Security, Vol. 15, No. 4, 1996, pp. 297-316.
12. Finne, T, A DSS for information security analysis: Computer support in a company's risk management, Proceedings of 1996 IEEE International Conference on Systems, Man and Cybernetics, Beijing, China, October 14-17, 1996, pp. 193-198.
13. Finne, Thomas, A Decision Support System for Improving Information Security, Turku Centre for Computer Science, Åbo Akademi University/IAMSR, Åbo, 1998.
14. Ghiossi, Rich, Foreword, Decision Support Systems for Competitive Advantage, Tandem Computers, UK, autumn 1996.
15. Gregory, Robert H. & Richard L. Van Horn, Automatic Data-Processing Systems: Principles and Procedures, Wadsworth Publishing Company, Inc. San Francisco, 1961.
16. Hancock, Bill, From the editor, Computers & Security, Vol. 19, No. 1, 2000, pp. 2-5.
17. Hirschheim, R., H. Klein & K. Lyytinen, Information Systems Development and Data Modeling: Conceptual and Philosophical Foundations, Cambridge University Press, Great Britain, 1995.
18. Holsapple, Clyde W. & Andrew B. Whinston, Decision Support Systems a Knowledge-Based Approach, West Publishing Company, USA, 1996.
19. IBM Data Security Support Programs, USA, 1984, p 1.
20. Iivari, Juhani, Rudi Hirschheim & Heinz K. Klein, An Assumption Analysis of Five Emerging Approaches to Informations Systems Development: Paradigmatic Foundations, Version: Jyväskylä, June 1995.
21. Kryt, Jacek. Data, information and knowledge, Information Systems World Network, 26.2.1997.
22. Land, Frank, The information systems domain, in Information Systems Research, Issues, Methods and Practical Guidelines, Ed. Galliers, Robert, Blackwell Scientific Publications, Great Britain, 1992, pp. 6-13.
23. Little, J.D.C., Models and managers: The concept of a decision calculus, Management Science, Vol.16, 1970, pp. B466-B485.
24. Lyytinen, Kalle, Information Systems and Critical Theory - A Critical Assessment, University of Jyväskylä, Department of Computer Science, Working Paper WP-13, July 1990.
25. Lyytinen, Kalle, Lecture notes, Finnish Doctoral Consortium, 19.08-21.08, 1996, Tampere, Finland.
26. March, Salvatore T. & Gerald F. Smith, Design and natural science research on information technology, Decision Support Systems, Number 15, 1995, pp. 251-266.
27. Nolan, R.L., Managing the computer resources: A stage hypothesis, Communications of the ACM, Vol 16. No 7, July 1973, pp. 399-405.
28. Nordic Council of Ministers, Information Security in Nordic Countries, Method/Questionnaire, Version: 29.3.1993, Copenhagen, 1993.
29. Nunamaker, Jay F., JR. Minder Chen, Titus D.M. Purdin, Systems development in information systems research, Journal of Management Information Systems, Winter 1990-91, Vol.7. No.3, pp. 89-106.
30. OECD Recommendation, Guidelines and Explanatory Memorandum for the Security of Information Systems, 26 November 1992.
31. Parker, Donn B., Information security in a nutshell, Information Systems Security, spring 1997, pp14-19.
32. Popper, Karl R., The Logic of Scientific Discovery, The Anchor Press, Great Britain, 1959.
33. PricetvaterhouseCoopers, Audit Framework, Global Risk Management Solutions (GRMS), 1999.
34. Shain, Michael, An overview of security: In Caelli, William., Longley, D & Shain, M., Information Security Handbook, Stockton Press, New York, 1991, pp. 1-25.
35. Swanson, E. Burton, Information systems innovation among organizations, Management Science, Volume 40, Number 9, September 1994, pp. 1069-1092.
36. Tietoturvasanasto, [Information Security Glossary], Tekniikan Sanastokeskus ry, Helsingin Tietojenkäsittely-yhdistys ry HETKY, 1992.
37. Tricker, R.I., The management of organizational knowledge, in Information Systems Research, Issues, Methods and Practical Guidelines, Ed. Galliers, Robert, Blackwell Scientific Publications, Great Britain, 1992, pp. 14-27.
38. Wilson, David A., Managing Knowledge, Butterworth Heinemann, Great Britain, 1996.
39. Watt, Steve, Computer Security Manager, Elsevier Science Publishers Ltd., England.