Embedding information security into the organization

IEEE Security and Privacy

Volumn 5, Issue 3, 2007, Pages 16-24

  Johnson, M Eric ^a   Goetz, Eric ^b  

^a DARTMOUTH COLLEGE   (United States)

^b DARTMOUTH COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY EDUCATION; SECURITY EXECUTIVES; SECURITY IMPROVEMENTS; SECURITY PROFESSIONALS;

EMBEDDED SYSTEMS; INFORMATION DISSEMINATION; RISK MANAGEMENT; SOCIETIES AND INSTITUTIONS;

SECURITY OF DATA;

EID: 34250015784     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2007.59     Document Type: Article

References (10)

1. K. Campbell et al., "The Economic Cost of Publicly Announced Information Security Breaches: Empirical Evidence from the Stock Market," J. Computer Security, vol. 11, no. 3, 2003, pp. 431-448.
2. A. Acquisti, A. Friedman, and R. Telang, "Is There a Cost to Privacy Breaches? An Event Study," Proc 5th Workshop on the Economics of Information Security, 2006; http://weis2006.econinfosec.org/prog.html.
3. M.E.Johnson, "The Safety of Secrets in Extended Enterprises," Financial Times, 18 Aug. 2004, p. A7.
4. E. Goetz and M.E.Johnson, Embedding Information Security Risk Management into the Extended Enterprise, I3P tech. report, 2006; http://mba.tuck.dartmouth.edu/digital/ Programs/CorporateEvents/CIO_PviskManage/ Overview.pdf.
5. Center for Digital Strategies, "Information Security and Privacy: At Odds with Speed and Collaboration?" Thought Leadership Summit on Digital Strategies Overview, Tuck School of Business at Dartmouth, 2004; http://mba.tuck.dartmouth.edu/digital/Programs/Corporate Events/ SecurityAndPrivacy/Overview2.pdf.
6. J. Shore, "Security Summit," Network World, 1 Nov 2004; www.networkworld.com/research/2004/110104summit.html.
7. S. Dynes, H. Brechbühl, and M.E. Johnson, "Information Security in the Extended Enterprise: Some Initial Results from a Field Study of an Industrial Firm," Proc. 4h Workshop on the Economics of Information Security, 2005; http://infosecon.net/workshop/index.php.
8. M.E. Johnson, "A Broader Context for Information Security," Financial Times, 16 Sept. 2005, p. 4.
9. J.M. Juran and F.M. Gryna, Quality Planning and Analysis, 4th ed., McGraw-Hill, 2000.
10. L.A. Gordon and M.P. Loeb, "Return on Information Security Investments: Myths vs. Reality," Strategic Finance, Nov. 2002, pp. 26-31.