Key issues in data center security: An investigation of government audit reports

Government Information Quarterly

Volumn 28, Issue 4, 2011, Pages 533-541

  Knapp, Kenneth J ^a   Denney, Gary D ^b   Barner, Mark E ^c  

^a UNIVERSITY OF TAMPA   (United States)

^b UNITED STATES AIR FORCE ACADEMY   (United States)

^c U S DEPARTMENT OF AGRICULTURE   (United States)

Author keywords

Audit reports; Common body of knowledge; Data center; Disaster preparedness; Information security; Operations security; Physical security

Indexed keywords

EID: 80053612909     PISSN: 0740624X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.giq.2010.10.008     Document Type: Article

References (22)

1. Chandler, C. (1996, September 29). The agency they love to get excited about - IRS's own problems and a complex tax code make it a favorite political target this year. The Washington Post, p. H1.
2. Fisher P. Operations security and controls. Information Security Management Handbook 2007, 2629-2639. Taylor & Francis Group, Boca Raton, FL. 6th ed. H.F. Tipton, M. Krause (Eds.).
3. GAO GAO/AIMD-96-85R security weaknesses at IRS' Cyberfile data center 1996, General Accounting Office, Accounting and Information Management Division, Washington D. C.
4. 2 guide to the CISSP exam 2004, Auerbach, New York.
5. HHS Department of Health and Human Services' HIPAA security guidance Retrieved March 27, 2008, from. http://www.cms.hhs.gov.
6. Hoover J.N. Data center best practices. Information Week 2008, March 1, 2010, from. http://www.informationweek.com/story/showArticle.jhtml?articleID=206900660.
7. King S. NYPD data center theft Retrieved June 29, 2010, from. http://www.computerweekly.com/blogs/stuart_king/2009/03/nypd-data-center.html.
8. Knapp K.J., Ford F.N., Marshall T.E., Rainer K.R.J. The common body of knowledge: A framework to promote relevant information security research. Journal of Digital Forensics, Security, and Law 2007, 2(1):9-34.
9. McTavish T.H. Audit report: Data center operations - State of Michigan, Department of Information Technology 2007, (No. 084-0580-06, Office of the Auditor General).
10. Miller R. Water main break floods Dallas Data Center (June 7, 2010). Data Center Knowledge 2010, 15 June, http://www.datacenterknowledge.com.
11. Mitchell R.L. Data centers go underground. Computerworld 2009, July 28, Retrieved July 2, 2010, from. http://www.computerworld.com/s/article/9135735/Data_centers_go_underground.
12. Omaha World Herald 5 teams bid on NSA work [electronic version], April 24 Retrieved June 24, 2010, from. http://www.omaha.com/article/20100424/MONEY/704249845.
13. Paquette S., Jaeger P.T., Wilson S.C. Identifying the security risks associated with governmental use of cloud computing. Government Information Quarterly 2010, 27(3):245-253.
14. Privacy Rights Clearinghouse A chronology of data breaches Retrieved June 24, 2010, from. http://www.privacyrights.org.
15. Santos O. End-to-end network security: Defense-in-depth 2007, Cisco Press, Indianapolis, IN.
16. Seacat S.A. Data center review, Department of Administration 2006, Legislative Audit Division, State of Montana, Helena, MT.
17. Stout, D. (2007). Memorandum. Re: Department of Administration, IS Audit Data Center Review Follow-up 07SP-025 (orig. 06DP-05). Helena, MT: Legislative Audit Division.
18. Thibodeau P. Robbery alters thinking on data center security. Computer World 2008, January 14, http://www.computerworld.com.
19. Thompson W.C. Audit report on the New York City Police Department data center 2006, Office of the Comptroller, City of New York, New York.
20. 2 guide to the CISSP CBK 2010, CRC Press - Taylor & Francis Group, Boca Raton, Florida. 2nd ed. H.F. Tipton (Ed.).
21. Vijayan J. ISO endorses key security certification. ComputerWorld 2004, June 28, 38:1-2.
22. Wyld D. Moving to the cloud: An introduction to cloud computing in government 2009, IBM Center for the Business of Government.