Creating an effective security risk model for outsourcing decisions

BT Technology Journal

Volumn 25, Issue 1, 2007, Pages 79-87

  Colwill, C ^a   Gray, A ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

CONTRACTS; INTERNATIONAL TRADE; OUTSOURCING; PERSONNEL;

AUDIT REGIMES; CORPORATE INFRASTRUCTURE FRAGMENTATION; PROTECTIVE MONITORING; RISK MODEL;

RISK PERCEPTION;

EID: 33947392571     PISSN: 13583948     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10550-007-0011-y     Document Type: Article

References (16)

1. BT News: Global Business Perspectives Issue 9 (2005).
2. Infosec Standard No. 1: Residual Risk Assessment Method (IS1) (2005).
3. Shifrin T: 'Data Commissioner warns on offshore data processing', Computer Weekly (17 August 2006).
4. Critical National Infrastructure (CNI) - http://www.niscc.gov.uk/niscc/ aboutCNI-en.html
5. Murray J: 'Security breach at HSBC's Bangalore facility leads to offshore data processing concerns', Computing (July 2006).
6. Good Practice Guide - Outsourcing: 'security Governance Framework for IT Managed Service Provision', (August 2006).
7. ISO/IEC27001 - International Standard for Information Security Management System (2005).
8. BS 7799 Part 2:2005 - Information Security Management Systems - Specification with guidance for use (2005).
9. BS7858 - Code of practice: Security screening of individuals employed in a security environment (2006).
10. Colwill C et al: 'Information assurance', BT Technol J, 19, No 3, pp 107-114 (July 2001).
11. Threat assessments - http://www.niscc.gov.uk/niscc/threats-en.html
12. CRAMM - http://www.cramm.com/
13. CESC Listed Advisor Scheme (CLAS) - http://www.cesg.gov.uk/site/clas/ index.cfm
14. Todd M et al: 'Security risk management in the BT HP alliance', BT Technol J, 24, No 4, pp 47-52 (October 2006).
15. NISCC Technical Note 03/03 'Protective Monitoring - Introduction to Audit and Account Log Analysis' - http://www.niscc.gov.uk/niscc/ techNotes-en.html?yr=2003&mo=3&da=31
16. De-perimeterisation - http://www.opengroup.org/projects/jericho/uploads/ 40/6809/vision_wp.pdf