Improving the ROI of the security management process

Computers and Security

Volumn 23, Issue 7, 2004, Pages 542-546

  Purser, Steve A ^a,b  

^a Clearstream Services   (Belgium)

^b NONE   (Belgium)

Author keywords

ROI; Security management

Indexed keywords

DECISION MAKING; INFORMATION ANALYSIS; PROCESS CONTROL; PROJECT MANAGEMENT; REENGINEERING; SOCIETIES AND INSTITUTIONS;

GLOBAL NETWORKING; ROI; SECURITY MANAGEMENT; SHORT-TERM BUSINESS; STRATEGIC PROJECTS;

SECURITY OF DATA;

EID: 8444250312     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.09.004     Document Type: Article

References (12)

1. Berinato S. Calculated risk. CSO online December 2002.
2. Global Information Security Survey 2003, 〈http://www.ey.com/global/ download.nsf/lnternational/TSRS_-_Global_Information_Security_Survey_2003/ $file/TSRS_-_Global_lnformation_Security_Survey_2003.pdf〉September 2003.
3. Guideline for automatic data processing risk analysis. FIPS publication 65; 1979.
4. Information Security Breaches Survey 2002, 〈http://www.pwcglobal. com/Extweb/ncsurvres.nsf/docid/845A49566045759E80256B9D003A4773〉; September 2003.
5. Investorwords, 〈http://www.investorwords.com/4316/ROI.html〉.
6. Leach J. Security engineering and security ROI. Computers & Security 22(6); 2003.
7. Mercuri RT. Analysing security costs. Communications of the ACM 46(6); 2003.
8. Newman A. Can security investments show ROI? Optimize Magazine (Issue 24); October 2003.
9. Purser S. Balancing opportunity and risk. Information Security Bulletin 9(4); 2004a.
10. Purser S. A practical guide to managing information security: Artech House; 2004b.
11. Surmacz J. An ounce of prevention, why ROI is the wrong question to ask about security. CSO online May 2002.
12. Whatis?.com, 〈http://whatis.techtarget.com/definition/0,289893, sid9_gci214270, 00.html〉.