Searching for the right fit: Balancing IT security management model trade-offs

IEEE Internet Computing

Volumn 12, Issue 3, 2008, Pages 22-30

  Hawkey, Kirstie ^a   Muldner, Kasia ^a   Beznosov, Konstantin ^a  

^a UNIVERSITY OF BRITISH COLUMBIA   (Canada)

Author keywords

Book reviews; Computer security professionals; Internet; Internet security; Interviews; Organizations; Security; Security management models; Standards; Training

Indexed keywords

INFORMATION TECHNOLOGY; PERSONNEL TRAINING; STANDARDS; USABILITY ENGINEERING;

SECURITY MANAGEMENT MODEL;

SECURITY OF DATA;

EID: 44449146478     PISSN: 10897801     EISSN: None     Source Type: Journal    
DOI: 10.1109/MIC.2008.61     Document Type: Article

References (8)

1. D.A. Siegel, B. Reid, and S.M. Dray, "IT Security: Protecting Organizations in Spite of Themselves," Interactions, May/June 2006, pp. 20-27.
2. A. Brown and G.G. Grant, "Framing the Frameworks: A Review of IT Governance Research," Comm. of the Assoc. for Information Systems vol. 15, 2005, pp. 696-712.
3. Infromation, Technology Security Techniques Code of Practice for Information Security Management, International Standards Organization, 2005; www.iso.org/iso/isoťalogue/catalogue_tc/ catalogue-detail.htm?csnumber-50297.
4. G. Killcrece et al., Organizational Models for Computer Security Incident Response Teams (CSIRTS), tech. report CMU/SEI-2003-HB-001 ADA421684, Software Eng. Institute, Carnegie Mellon Univ., 2003; www.sci.emu.edu/publications/documents/03.reports/03hb001.html.
5. D. Botta et al., "Toward Understanding IT Security Professionals and Their Tools," Proc. Symp. Universal Privacy and Security, ACM Int'l Conf. Proc. Series, vol. 229, 2007, pp. 100-111.
6. K. Hawkey, K. Muldner, and K. Beznosov, Searching for the Right Fit: A Case Study of IT Security Management Model Trade-Offs, tech. report LERSSE-TR-2007-03, Laboratory for Education and Research in Secure Systems Eng., Univ. of British Columbia, 2007; http:// lersse-dl.ece.ubc.ca/search.py?recid-139.
7. D.M. Wegner, "Transactive Memory: A Contemporary Analysis of the Group Mind," Theories of Group Behavior, B. Mullen and G.R. Goethals, eds., Springer-Verlag, 1986, pp. 185-208.
8. D. Lewis, "IT Governance: Stop the Pendulum!" Computer World, 12 Jan. 2004; www.computerworld.com/managementtopics/management/story/ 0,10801,88888,00.html.