Management of risk in the information age

Computers and Security

Volumn 24, Issue 1, 2005, Pages 16-30

  Gerber, Mariana ^a   Von Solms, Rossouw ^a  

^a NELSON MANDELA METROPOLITAN UNIVERSITY   (South Africa)

Author keywords

Information security; Information security management; Information security requirements; Risk analysis

Indexed keywords

DECISION MAKING; ELECTRONIC COMMERCE; EVALUATION; INFORMATION ANALYSIS; INFORMATION TECHNOLOGY; SECURITY OF DATA;

CASE-BASED REASONING; INFORMATION SECURITY MANAGEMENT; INFORMATION SECURITY REQUIREMENTS; RISK ANALYSIS;

RISK MANAGEMENT;

EID: 15744404682     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.11.002     Document Type: Article

References (68)

1. A.M. Anderson Comparing risk analysis methodologies Proceedings of the IFIP TC11 seventh international conference on information security 1991 North Holland New York, NY, Amsterdam 301 311
2. K. Bandyopadhyay, P.P. Mykytyn, and K. Mykytyn A framework for integrated risk management in information technology Management Decision 37 5 1999 437 444 MCB Press
3. R. Baskerville Risk analysis as a source of professional knowledge Computers and Security 10 8 1991 749 764
4. R. Baskerville Information systems security design methods: implications for information systems development ACM Computing Surveys 25 4 1993 373 414
5. D.G.W. Birch, and N.A. McEvoy Risk analysis for information systems Journal of Information Technology 7 1 1992
6. T. Boddington, and S. Hill Preparing for BS 7799 certification 1998 British Standards Institution London
7. British Standards Institution Quality vocabulary BS4778 [Part 3 Section 3.2=IEC 1990 50(191)] 1991 BSI London
8. BS 7799-1 Information security management - Part 1: code of practice for information security management 1999 British Standards Institution London
9. BS 7799-2 Information security management - Part 2: specification for information security management systems 1999 British Standards Institution London
10. J.G. Burch, F.R. Strater, and G. Grudnitski Information systems: theory and practice 2nd ed. 1979 John Wiley & Sons, Inc. Canada
11. D. Burnie Science Retrieved Dec 2, 2003, from Microsoft® Encarta® Online Encyclopedia 1997/2003: 〈http://encarta.msn.com/text_761557105_1/ Science.html〉 2003
12. Central Oregon Community College Social science disciplines Retrieved November 25, 2003 from 〈http://www.cocc.edu/admit/shells/trans/ social_disciplines.htm〉 2003
13. R. Clark Risk management - a new approach Proceedings of the fourth IFIP TCII international conference on computer security 1989 North Holland New York, NY, Amsterdam
14. S. Deuchar Major organizations take to managing risk ESecure 4 2003, March Technews. Retrieved November 04, 2003 from 〈http://ebiz.co.za/news. asp?pklNewsid=9626&pklIssueID=308〉
15. M. Douglas Risk as a forensic resource Daedalus 119 4 1990 1 17
16. M. Douglas Risk and blame Risk and blame: essays in cultural theory 1992 Routledge London 3 21
17. M. Douglas, and A. Wildavsky Risk and culture 1982 University of California Press Berkeley, CA
18. C. Erfmann Are you prepared to share? ESecure 4 2003, October Technews. Retrieved November 04, 2003 from 〈http://ebiz.co.za/article.asp? pklArticleid=2095&pklIssueID=286〉
19. S. Frosdick The techniques of risk analysis are insufficient in themselves Disaster Prevention and Management 6 3 1997 165 177 MCB University Press
20. Fung P, Kwok L, Longley D. Electronic information security documentation - Australasian information security workshop (AISW2003). In: Johnson C, Montague P, Steketee C, editors. Conferences in research and practice in information technology, 21. Adelaide, Australia; 2003.
21. W.M. Garrabrants, A.W. Ellis III, L.J. Hoffman, and M. Kamel CERTS: a comparative evaluation method for risk management methodologies and tools Sixth annual computer security conference 1990 IEEE Computer Society Press Los Alamitos, CA
22. M. Gerber, and R. von Solms From risk analysis to security requirements Computers and Security 20 7 2001 577 584
23. J.K. Glenn Book review: three social science disciplines in Central and Eastern Europe: handbook on economics, political science and sociology 1989-2001 Retrieved November 25, 2003, from the Columbia University website from page 1 at 〈http://www.columbia.edu/cu/sipa/REGIONAL/ECE/glenn1.pdf〉
24. Hartoonian M. Alaska Department of Education & Early Development: making content connections. Retrieved November 25, 2003 from 〈http://www.educ.state.ak.us/tls/frameworks/sstudies/part2d.htm〈.
25. HSE: Health and Safety Executive The tolerability of risk from nuclear power stations 1988 HMSO London
26. E.J. Humphreys, R.H. Moses, and A.E. Plate Guide to risk assessment and risk management 1998 British Standards Institution London
27. Infoplease.com Information please: on-line dictionary Internet Encyclopedia, Atlas & Almanac 1998-2004 Retrieved Nov 25, 2003 from 〈http://www.infoplease.com/ipd/A0549812.html〉
28. ISO/IEC TR 13335-1. Information technology - guidelines for the management of IT security - Part 1: concepts and models for IT Security. 1st ed. Switzerland; 1996.
29. R.V. Jacobson CORA. Cost-of-risk analysis. Painless risk management for small systems 1996 International Security Technology, Inc.
30. C. Jung, I. Han, and B. Suh Risk analysis for electronic commerce using case-based reasoning International Journal of Intelligent Systems in Accounting, Finance and Management 8 1999 61 73 John Wiley & Sons, Ltd
31. M.P. Kailay, and P. Jarratt RAMeX: a prototype expert system for computer security analysis and management Computers and Security 14 1995 449 463
32. S.W. Katzke A government perspective on risk management of automated information systems Proceedings of the 1988 computer security risk management model builders workshop 1987 3 20
33. A.S. Kirkwood Why do we worry when scientists say there is no risk? Disaster Prevention and Management 3 2 1994 15 22 MCB University Press
34. D.A. Krupp Introduction to the science of biology: the nature of natural science Retrieved Dec 2, 2003, from 〈http://imiloa.wcc.hawaii.edu/krupp/ BIOL101/present/lcture01/index.htm〉 1999, July 10
35. S. Lichtenstein Factors in the selection of a risk assessment method Information Management and Computer Security 4 4 1996 20 25 MCB University Press
36. D. Mayo, and R. Hollander Introduction to Part II - uncertain evidence in risk management D. Mayo R. Hollander Acceptable evidence: science and values in risk management 1991 Oxford University Press Oxford 93 98
37. Merriam-Webster's collegiate dictionary 2002 Merriam-Webster Incorporated
38. Miami-Dade Community College Social Science Department: disciplines Retrieved November 25, 2003 from 〈http://www.mdcc.edu/kendall/social/ disciplines.htm〉 2003
39. R.H. Moses Risk analysis and management K.M. Jackson J. Hruska Computer security reference book 1992 Butterworth-Heinemann Ltd. Oxford
40. R. Moses A European standard for risk analysis Proceedings of COMPSEC international 1993 Elsevier Oxford
41. NIST (National Institute of Standards and Technology) An introduction to computer security [Special publication 800-12] 1995 U.S. Department of Commerce Washington
42. NIST (National Institute of Standards and Technology) Risk management guide for information technology systems [Special publication 800-30] 2001 U.S. Department of Commerce Washington
43. Original Roget's® thesaurus of English words and phrases 5th ed. 1992 Longman Group UK limited Essex, England
44. S. Owens Information security management: an introduction 1998 British Standards Institution London
45. Oxford advanced learner's dictionary 5th ed. 1995 Oxford University Press Oxford
46. G. Peter SA must be ready for a new threat ESecure 4 2003, July Technews. Retrieved Nov 04, 2003 for 〈http://securitysa.com/regular.asp? pklRegularid=1435&pklIssueID=340〉
47. C.P. Pfleeger Security in computing 1989 Prentice Hall Englewood Cliffs, NJ
48. C.P. Pfleeger Security in computing 2nd ed. 1997 Prentice Hall, Inc.
49. G. Priest The new legal structure of risk control Daedalus 119 4 1990 207 228
50. G. Roth E-commerce and e-business have changed the profile of corporate legal risk ESecure 3 2003, September Technews. Retrieved Nov 04, 2003 from 〈http://estrategy.co.za/news.asp?pklNewsID=12125&pklIssueID= 346&pklCategoryID=141〉
51. Royal Society Risk assessment, report of a Royal Society study group 1983 The Royal Society London
52. Royal Society Risk: analysis, perception and management, report of a Royal Society study group 1992 The Royal Society London
53. F. Scarff, A. Carty, and R. Charette Introduction to the management of risk 1993 HMSO Norwich
54. D. Smith Major organisations take to managing risk ESecure 4 2003, March Technews. Retrieved November 04, 2003 from 〈http://ebiz.co.za/news.asp? pklNewsid=9626&pklIssueID=308〈
55. M. Smithson The changing nature of ignorance J. Handmer B. Dutton B. Guerin M. Smithson New perspectives on uncertainty and risk, Centre for Resource and Environmental Studies 1991 Australian National University, Canberra and Australian Counter disaster College, Natural Disasters Organization Mt Macedon 5 58
56. H. Stark Engineering Retrieved Dec 2, 2003, from Microsoft® Encarta® Online Encyclopedia 1997/2003: 〈http://encarta.msn.com/ text_761570676_1/Engineering.html〉 2003
57. Strutt J. Risk assessment and management: the engineering approach. Unpublished paper, Centre for Industrial Safety and Reliability, Cranfield University; 1993.
58. Suojanen T. Technical communication research: dissemination, reception, utilization. Unpublished Licentiate Thesis in translation studies: English translation and interpretation. Retrieved Dec 2, 2003, from University of Tampere Web site: 〈http://tutkielmat.uta.fi/pdf/lisuri00001.pdf〉 2000.
59. L. Tchankova Risk identification - basic stage in risk management Environmental Management and Health 13 3 2002 290 297 MCB UP Limited
60. The American Heritage® dictionary of the English language 4th ed. 2000 Houghton Mifflin company
61. University of Maryland University College Social science: supplemental major courses Retrieved November 25, 2003, from University of Maryland University College Web site: 〈http://www.umuc.edu/prog/ugp/majors/socs. shtml〉 1996-2003
62. URN 99/704 (NEW) Information your most valuable asset. Protect it 1999 Department of Trade and Industry
63. U.S. Department of Labor Bureau of labor statistics: occupational handbook Online http://www.bls.gov/oco/home.htm 2002-2003
64. F. Warner Calculated risks Science and public affairs winter 1992 1993 44 49
65. B.S. Weems Computer science Retrieved Dec 2, 2003, from Microsoft® Encarta® Online Encyclopedia 1997/2003: 〈http://encarta.msn.com/ text_761563863_1/Computer_Science.html〉 2003
66. Wikipedia Wikipedia: the free encyclopedia Retrieved September 8, 2004 from 〈http://en.wikipedia.org/wiki/Natural_science〉 2004, October
67. Wills M. Personal communication. In URN 99/699 (New). Protecting business information - overview. Department of Trade and Industry; 1999.
68. WordNet® 1.6 Engineering. Princeton University Retrieved November 26, 2003 from 〈http://dictionary.reference.com/search?r=2q=engineering〉 1997