Collaboration and knowledge sharing platform for supporting a risk management network of practice

Proceedings - 3rd International Conference on Internet and Web Applications and Services, ICIW 2008

Volumn , Issue , 2008, Pages 239-244

  Papadaki, Katerina ^a   Polemi, Despina ^b  

^a NATIONAL TECHNICAL UNIVERSITY OF ATHENS   (Greece)

^b UNIVERSITY OF PIRAEUS   (Greece)

Author keywords

Collaboration and knowledge sharing platform; Information security risk management; Network of practice; Risk management meta process

Indexed keywords

COMPUTER NETWORKS; INFORMATION RETRIEVAL SYSTEMS; INFORMATION SERVICES; INTERNET; RISK ANALYSIS; RISK MANAGEMENT; WORLD WIDE WEB;

COLLABORATION AND KNOWLEDGE SHARING PLATFORM; INFORMATION SECURITY; INFORMATION SECURITY RISK MANAGEMENT; NETWORK OF PRACTICE; RISK MANAGEMENT META-PROCESS;

INFORMATION MANAGEMENT;

EID: 51049115099     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICIW.2008.78     Document Type: Conference Paper

References (32)

1. Champlain, J. Practical IT Auditing, Warren Gorham & Lamont, USA, 2005.
2. ISO/IEC 27005, Information Technology - Security Techniques - Information security risk management, Committee Draft, 2004.
3. Parker, X.L., Information Technology Audits, CCH, USA, 2006.
4. Flood, R. L., and Jackson, M. C., Creative Problem Solving: Total Systems Intervention, Wiley, Chichester, 1991.
5. Brown, J S & Duguid, P, "Knowledge and organization: A social-practice perspective", Organization Science, 12, 2: 198-213, 2001.
6. ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - requirements, 2005.
7. Peltier, T.R., Information Security Risk Analysis, Auerbach, 2001
8. Papadaki, K., Polemi, D., "Towards a systematic approach for improving information security risk management methods", in Proc. 18th Annual IEEE International Symposium on Personal, Indoor and Mobile Radio Communication (PIMRC), 2007.
9. Midgley, G., "Developing the Methodology of TSI: From the Oblique Use of Methods to Creative Design", Systems Practice, Vol. 10, No. 3, pp 305-319, 1997.
10. COSO (Committee of Sponsoring Organizations of the Treadway Commission), Enterprise Risk Management - Integrated Framework, 2004.
11. Dhillon, G. and Backhouse, J., "Current Direction in IS Security Research: Towards Socio- Organizational Perspectives", Information Systems Journal, vol. 11, pp. 127-153, 2001.
12. Siponen, M., "Analysis of modern IS security development approaches: towards the next generation of social and adaptable ISS methods", Information and Organization, vol. 15, pp. 339-375, 2005.
13. Gerber, M. and von Solms, R., "Management of risk in the information age", Computers & Security, 24, 16-30, 2005.
14. Nonaka, I., Takeuchi, H., The Knowledge-Creating Company, Oxford University Press, Oxford, UK, 1995.
15. Ghosh, T.: Creating Incentives for Knowledge Sharing. Technical report, MIT Open Courseware, Sloan school of management, Cambridge, Massachusetts, USA, 2004.
16. Haldin-Herrgard, T., "Difficulties in Diffusion of Tacit Knowledge in Organizations", Journal of Intellectual Capital 1(4), 357-365, 2000.
17. Hansen, M.T., Nohria, N., Tierney, T. "What's Your Strategy for Managing Knowledge?" Harvard Business Review 77(2), 106-116, 1999.
18. Desouza, K.C.,Awazu, Y., Baloh, P. "Managing Knowledge in Global Software Development Efforts: Issues and Practices" IEEE Software 23(5), 30-37, 2006.
19. van den Brink, P. "Social, Organization, and Technological Conditions that Enable Knowledge Sharing" PhD thesis, Technische Universiteit Delft, 2003.
20. Nardi, B.A., Schiano, D.J., Gumbrecht, M., Swartz, L. "Why We Blog" Communications of the ACM, 47(12), 41-46, 2004.
21. Fan, W., Wallace, L., Rich, S., Zhang, Z. "Tapping the Power of Text Mining" Communications of the ACM 49(9), 77-82, 2006.
22. Armstrong, H., "Managing information security in healthcare - an action research experience", in Proceedings of the Sixteen Annual Working Conference on Information Security, 2000.
23. Butler, S. and Fischbeck, P., "Multi-Attribute Risk Assessment", in Proceedings of the Symposium on Requirements Engineering for Information Security (SREIS), 2002.
24. Stamatiou, Y., Skipenes, E., Henriksen, E., Stathiakis, N.,Sikianakis, A., Charalambous, E., Antonakis, N., Stølen, K., den Braber, F.,Soldal Lund, M., Papadaki, K., Valvis, G., "The CORAS approach for model-based risk management applied to a telemedicine service", in Proceedings of the Medical Informatics Europe (MIE'2003), pp. 206-211, IOS Press, 2003.
25. ENISA (European Network and Information Security Agency), "Risk Management: Implementation principles and Inventories for Risk Management/Risk Assessment methods and tools", Available online: http://www.enisa.europa. eu/rmra/files/D1_Inventory_of_Methods_Risk_Management_Final.pdf
26. de Moor, A. and Weigand, H., "Formalizing the evolution of virtual communities", Information Systems , Volume 32, Issue 2, Pages 223-247, April 2007.
27. Hsu, M., Ju T., Yen, C., Chang, C., "Knowledge sharing behavior in virtual communities: The relationship between trust, self-efficacy, and outcome expectations", International Journal of Human-Computer Studies , Volume 65, Issue 2, Pages 153-169, February 2007.
28. Chiu, C., Hsu, M., Wang, E., "Understanding knowledge sharing in virtual communities: An integration of social capital and social cognitive theories", Decision Support Systems, Volume 42, Issue 3, Pages 1872-1888, December 2006.
29. Yangand, S., Chen, I. , "A social network-based system for supporting interactive collaboration in knowledge sharing over peer-to-peer network", International Journal of Human-Computer Studies, Volume 66, Issue 1, Pages 36-50, January 2008.
30. Jablonski, S., Guide to web application and platform architectures, Berlin Springer, 2004.
31. Alonso, G., Web services: concepts, architectures and applications, Berlin Springer, 2004.
32. Olson, D., Wu, D., Enterprise Risk Management, World Scientific Publishing, 2007.