Enterprise security architecture in business convergence environments

Industrial Management and Data Systems

Volumn 105, Issue 7, 2005, Pages 919-936

  Kim, Sangkyun ^a   Leem, Choon Seong ^a  

^a Yonsei University   (South Korea)

Author keywords

Data security; Information systems; Modelling; Risk management

Indexed keywords

COMPUTER ARCHITECTURE; INDUSTRIAL MANAGEMENT; MANAGEMENT INFORMATION SYSTEMS; MANAGERS; PROBLEM SOLVING; RISK MANAGEMENT; SOCIETIES AND INSTITUTIONS;

INFORMATION SYSTEMS; MODELING; RISK ANALYSIS;

SECURITY OF DATA;

EID: 25144474491     PISSN: 02635577     EISSN: None     Source Type: Journal    
DOI: 10.1108/02635570510616111     Document Type: Article

References (38)

1. Abrams, C. (2001), Convergence: Understanding a Transformation Imperative, Gartner Inc., Stamford, CT.
2. Amoroso, E.G. (1994), Fundamentals of Computer Security Technology, Prentice-Hall, Englewood Cliffs, NJ.
3. Baccarini, D., Salm, G. and Love, P.E.D. (2004), "Management of risks in information technology projects", Industrial Management & Data Systems, Vol. 104 No. 4, pp. 286-95.
4. Bass, L., Clements, P. and Kazman, R. (1997), Software Architecture in Practice, Addison-Wesley, Boston, MA.
5. Bayle, A.J. (1988), "Security in open system networks: a tutorial survey", Information Age, Vol. 10 No. 3, pp. 131-45.
6. Boar, B.H. (1999), Constructing Blueprints for Enterprise IT Architectures, Wiley, New York, NY.
7. Booch, G., Rumbaugh, J. and Jacobson, I. (1999), The UML Modeling Language User Guide, Addison-Wesley, Boston, MA.
8. Courtney, H., Kirkland, J. and Viguerie, P. (1997), "Strategy under uncertainty", Harvard Business Review, Vol. 75 No. 6, pp. 67-79.
9. CSE (1996), Guide to Risk Assessment and Safeguard Selection for Information Technology Systems, Communications Security Establishment, Ottawa.
10. Deise, M.V., Nowikow, C., King, P. and Wright, A. (2000), Executive's Guide to E-business: from Tactics to Strategy, Wiley, New York, NY.
11. Dey, P.K. and Ogunlana, S.O. (2004), "Selection and application of risk management tools and techniques for build-operate-transfer projects", Industrial Management & Data Systems, Vol. 104 No. 4, pp. 334-46.
12. Fine, L.H. (1983), Computer Security - A Handbook for Management, William Heinemann, London.
13. Fites, P.E., Kratz, M.P.J. and Brebner, A.F. (1989), Controls and Security of Computer Information Systems, Computer Science Press, Rockville, MD.
14. Forcht, K.A. and Pierson, J. (1994), "New technologies and future trends in computer security", Industrial Management & Data Systems, Vol. 94 No. 8, pp. 30-6.
15. Huang, S., Chang, I., Li, S. and Lin, M. (2004), "Assessing risk in ERP projects: identify and prioritize the factors", Industrial Management & Data Systems, Vol. 104 No. 8, pp. 681-8.
16. Jazayeri, M., Ran, A. and Linden, F.V.D. (2000), Software Architecture for Product Families: Principles and Practice, Addison-Wesley, Boston, MA.
17. Johnson, M. and Whitman, L. (1998), "Enterprise engineering: a discipline for integrating people, processes and technologies in the knowledge era", Proceedings of the Business Process and Knowledge Management Conference 1998, Orlando, FL.
18. Kim, S. and Leem, C.S. (2004), "An information engineering methodology for the security strategy planning", Lecture Notes in Computer Science, Vol. 3043, pp. 597-607.
19. Kim, S. and Leem, C.S. (2005), "Security of the internet-based instant messenger: risks and safeguards", Internet Research: Electronic Networking Applications and Policy, Vol. 15 No. 1, pp. 88-98.
20. Krutz, R.L. and Vines, R.D. (2001), The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, Wiley, New York, NY.
21. Li, D.H. (1983), Controls in a Computer Environment: Objectives, Guidelines, and Audit Procedures, EDP Auditors Foundation, Carol Stream, IL.
22. Mack, R., Gerrard, M. and Frey, N. (2002), An IS Perspective on Mergers and Acquisitions: A Six-Stage Handbook, Gartner Inc., Stamford, CT.
23. Madnick, S.E. (1978), "Management policies and procedures needed for effective computer security", Sloan Management Review, Vol. 19 No. 3, pp. 61-74.
24. Meyer, C. and Davis, S. (2003), It's Alive, Crown Business, New York, NY.
25. NIST (2001), Security Assessment Guide Information Technology Systems, NIST, Gaithersburg, MD.
26. Oh, D.J. (2003), "A study of the business strategy on the convergence: an analysis of the assets and the complementary assets", Master's thesis, Ewha Women's University, Seoul.
27. Post, G.V. and Diltz, J.D. (1986), "A stochastic dominance approach to risk analysis of computer systems", MIS Quarterly, Vol. 10 No. 4, pp. 363-75.
28. Rainer, R.K., Snyder, C.A. and Carr, H.H. (1991), "Risk analysis for information technology", Journal of Management Information Systems, Vol. 8 No. 1, pp. 129-47.
29. Rechtin, E. (1991), System Architecting: Creating and Building Complex Systems, Prentice-Hall, Englewood Cliffs, NJ.
30. Rold, C.D. (2002), Service Market: Technical Convergence, Gartner Inc., Stamford, CT.
31. Ron, W. (1988), EDP Auditing: Conceptual Foundations and Practice, McGraw-Hill, New York, NY.
32. Schweitzer, J.A. (1983), Protecting Information in the Electronic Workplace: A Guide for Managers, Reston Publishing Company, Reston, VA.
33. Suh, B. (1996), "Design of the conceptual framework of Korean risk management system: identification of information system threats", Master's thesis, KAIST, Daejeon.
34. Swanson, M. (1998), Guide for Developing Security Plans for Information Technology Systems, NIST, Gaithersburg, MD.
35. Vallabhaneni, R. (2000), CISSP Examination Textbooks, SRV Professional Publications, Los Angeles, CA.
36. Yoffie, D.B. (1997), Competing in the Age of Digital Convergence, Harvard Business School Press, Boston, MA.
37. Zachman, J.A. (1999), "A framework for information systems architecture", IBM Systems Journal, Vol. 38 Nos 2/3, pp. 450-70.
38. Zhang, Q. and Cao, M. (2002), "Business process reengineering for flexibility and innovation in manufacturing", Industrial Management & Data Systems, Vol. 102 No. 3, pp. 146-52.