Assessing the value of Enterprise Identity Management (EIdM) - Towards a generic evaluation approach

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 779-786

  Royer, Denis ^a  

^a GOETHE UNIVERSITY   (Germany)

Author keywords

Balanced scorecard; Cost benefit analysis; Decision support; Enterprise Identity Management (EIdM).; IT security investments

Indexed keywords

DECISION SUPPORT SYSTEMS; PROCESS ENGINEERING; SOLUTIONS; STRATEGIC PLANNING;

BALANCED SCORECARD; BUSINESS PROCESSES; COST/BENEFIT ANALYSIS; DECISION PROCESS; DECISION SUPPORT; DECISION SUPPORTS; ENTERPRISE IDENTITY MANAGEMENT (EIDM).; GENERIC APPROACHES; GENERIC EVALUATION; IDENTITY MANAGEMENT; IDENTITY MANAGEMENT SYSTEMS; INTERNATIONAL CONFERENCES; IT INFRASTRUCTURES; IT SECURITY INVESTMENTS; ORGANISATIONAL ASPECTS; PLANNING PHASE; PLANNING PROCESS; POSSIBLE SOLUTIONS;

PLANNING;

EID: 49049120863     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.116     Document Type: Conference Paper

References (35)

1. B.I. Dewey and P.B. DeBlois, "Current Issues Survey Report 2007", EDUCAUSE Quarterly, vol. 30, no. 2, 2007, pp. 12-31.
2. FIDIS NoE, "Future of Identity in the Information Society (FIDIS)", 2007, http://www.fidis.net.
3. P.J. Windley, Digital Identity, O'Reilly, 2005.
4. M. Hansen and M. Meints, "Digitale Identitáten - Überblick und aktuelle Trends", Datenschutz und Datensicherheit (DuD), vol. 30, no. 9, 2006, pp. 571-575.
5. C. Mezler-Andelberg, Identity Management - eine Einführung, dpunkt-Verlag, 2008.
6. M. Bauer, M. Meints and M. Hansen, Deliverable D3.1: Structured Overview on Prototypes and Concepts of Identity Management Systems, FIDIS, 2005.
7. M.J. Flynn, "Enterprise Identity Services", 2007, http://360tek.blogspot.com/2006/07/enterprise-identity-services.html.
8. H. Berghel, "The Two Sides of ROI: Return on Investment vs. Risk of Incarceration", Communications of the ACM, vol. 48, no. 4, 2005, pp. 15-20.
9. J.A. Hall and S.L. Liedtka, "The Sarbanes-Oxley Act: IMPLICATIONS for large-scale IT Outsourcing", Communications of the ACM, vol. 50, no. 3, 2007, pp. 95-100.
10. GenericIAM, "Processes of Identity and Access Management", 2007, http://www.genericiam.org/.
11. D. Royer, "Enterprise Identity Management - What's in it for Organisations?", in: (forthcoming) Proceedings of the IFIP/FIDIS Summer School on "The Future of Identity in the Information Society", S. Fischer-Huebner et al., Edt., Springer, 2008,.
12. A.R. Hevner, S.T. March and J. Park, "Design Science in Information Systems Research", MIS Quarterly, vol. 28, no. 1, 2004, pp. 75-105.
13. A.S. Lee, "Integrating Positivist and Interpretive Approaches to Organizational Research", Organisational Science, vol. 4, no. 2, 1991, pp. 342-365.
14. Deron GmbH, Identity Management Studie 2006/2007, Deron, 2007.
15. K. Schmeh and H. Uebelacker, Sicherheit, die sich rechnet - Return-on-Investment in der IT-Security, 2006.
16. S.A. Purser, "Improving the ROI of the security management process", vol. 23, no. 6, 2004, pp. 542-546.
17. H. Erdogmus, J. Favaro and W. Strigel, "Return on Investment", IEEE Software, vol. 21, no. 3, 2004, pp. 18-22.
18. B.L. Dos Santos and L. Sussman, "Improving the return on IT investment: the productivity paradox", International Journal of Information Management, vol. 20, no. 6, 2000, pp. 429-440.
19. C. Magnusson, J. Molvidsson and S. Zetterqvist, "Value Creation and Return On Security Investmensts (ROSI)", in: IFIP SEC 2007: New Approaches for Security, Privacy and Trust in Complex Environments, vol. 232, H. Venter et al., Edt., Springer, 2007, pp. 25-35.
20. E. Brynjolfsson, "The Productivity Paradox of Information Technology", Communications of the ACM, vol. 36, no. 12, 1993, pp. 67-77.
21. A. Jonen et al., "Balanced IT-Decision-Card, Ein Instrument für das Investitionscontrolling von IT-Projekten", Wirtschaftsinformatik, vol. 46, no. 3, 2004, pp. 196-203.
22. Z. Wan, Y. Fang and M. Wade, "A Ten-Year Odyssey of the "IS Productivity Paradox" - A Citation Analysis (1996-2006)", Proceedings of the 13th Americas Conference on Information Systems (AMCIS), 2007.
23. R. v. Solingen, "Measuring the ROI of Software Process Improvement", IEEE Software, vol. 21, no. 3, 2004, pp. 32-38.
24. H. Cavusoglu, B. Mishra and S. Raghunathan, "A Model for Evaluating IT Security Investments", Communications of the ACM, vol. 47, no. 7, 2004, pp. 87-92.
25. W. Sonnenreich, J. Albanese and B. Stout, "Return On Security Investment (ROSI) - A Practical Quantitative Model", Journal of Research and Practice in Information Technology, vol. 38, no. 1, 2006, pp. 45-56.
26. H. Rossnagel and D. Royer, "Investing in Security Solutions - Can Qualified Electronic Signatures be Profitable for Mobile Operators", Proceedings of the 11th Americas Conference on Information Systems (AMCIS), 2005, pp. 3248-3257.
27. C.J. Franklin, "The ABCs of ROI", Network Computing, 2002, pp. 93-95.
28. H. Blohm and K. Lüder, Investition, Schwachstellenanalyse des Investitionsbereichs und Investitionsrechnung, Vahlen, 1995.
29. I. Potthof, Kosten und Nutzen der Informationsverarbeitung: Analyse und Beurteilung von Investitionsentscheidungen, DUV/Gabler, 1998.
30. H. Geschka and R. Hammer, "Die Szenario Technik in der strategischen Unternehmensplanung", in: Strategische Unternehmensplanung strategische Unternehmensführung, 7.ed., D. Hahn and B. Taylor, Edt., Physica, 1997, pp. 464-489.
31. M. Keil et al., "A Framework Identifying Software Project Risks", Communications of the ACM, vol. 41, no. 11, 1998, pp. 76-83.
32. T. Pisello, Return on Investment for Information Technology Providers, Information Economics Press, 2001.
33. Gartner Research, Consider Identity and Access Management as a Process, Not a Technology, 2005.
34. T.A. May, "The death of ROI: re-thinking IT value measurement", Information Management & Computer Security, vol. 5, no. 3, 1997, pp. 90-92.
35. R.S. Kaplan and D.P. Norton, The Balanced Scorecard. Translating Strategy into Action, Random House, 1996.