Information security governance

Information Security Governance

Volumn , Issue , 2009, Pages 1-134

  Von Solms, S H ^a   Von Solms, R ^b  

^a UNIVERSITY OF JOHANNESBURG   (South Africa)

^b NELSON MANDELA METROPOLITAN UNIVERSITY   (South Africa)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84892825960     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/978-0-387-79984-1     Document Type: Book

References (36)

1. Bollard (2003) Corporate Governance in the Financial Sector. Available from http://www.rbnz.govt.nz/speeches/0132484.html. Accessed 2 April 2008
2. Wikipedia Corporate Governance. Available from http://en.wikipedia.org/ wiki/Corporate-governance. Accessed 2 April 2008
3. Ioannis Chalaris et al. (2005) IT Governance: The Safe Way to Effective and Efficient Governance. E-Journal of Science and Technology, 1, 59-63. Available from http://e-jst.teiath.gr/eng/halaris.pdf.Access 21 March 2008
4. Avijit Sikder Corporate Governance. http://www.asikder.com/documents/ Corporate%20 Governance.doc. Accessed 21 March 2008
5. King 2 (2002) Report on Corporate Governance. Available from the Institute of Directors, Johannesburg, South Africa, http://www.iodsa.co.za
6. OECD (2004) Principles of Corporate Governance. Available from the OECD, http://www.oecd.org
7. Board Briefing on IT Governance (2003). 2nd Edition. IT Governance Institute. Available from ISACA http://www.isaca.org
8. Board Briefing on IT Governance (2003). 2nd Edition. IT Governance Institute. Available from ISACA www.isaca.org
9. Information Security Management and Assurance-A Call to Action for Corporate Governance (1997). Available from http://www.theiia.org/download.cfm? file=22398. Accessed 2 April 2008
10. Information Risks: Whose Business are They? (2005). IT Governance Institute. Available from ISACA www.isaca.org
11. Information Security Governance-It's your Responsibility (2005). Available from http://www.deloitte.com/dtt/cda/doc/content/UK-TA-Infosecurity- 2005.pdf. Accessed 2 April 2008
12. COBIT (2005). Control Objectives for Information and Related Technology. Available from ISACA. www.isaca.org
13. Information Security Management and Assurance-A Call to Action for Corporate Governance (1997). Available from http://www.theiia.org/download.cfm? file=22398. Accessed 2 April 2008
14. ISO/IEC 27002 (2005). Information Technology-Security Techniques-Code of Practice for Information Security Management. International Organization for Standardization. Available from www.iso.ch
15. COBIT (2005). Control Objectives for Information and Related Technology. Available from ISACA. Available from www.isaca.org
16. ISO/IEC 27001 (2005). Information Technology-Security Techniques-Information Security Management Systems-Requirements, International Organization for Standardization. Available from www.iso.ch
17. EU Privacy Directive 95/46/EC (1995). Available from http://www.cdt.org/ privacy/eudirective/EU-Directive-.html. Accessed 21 March 2008
18. The Sarbanes-Oxley Act (2002). Available from http://www.soxlaw.com/. Accessed 21 March 2008
19. HIPAA (1006). The Health Insurance Portability and Accountability Act. Available from http://en.wikipedia.org/wiki/Health-Insurance-Portability-and- Accountability-Act. Accessed 21 March 2008
20. Gramm-Leach-Bliley Act (1999). Available from http://en.wikipedia.org/ wiki/Gramm-Leach-Bliley-Act. Accessed 21 March 2008
21. Information Security Governance-A Call to Action (2004). National Cyber Security Summit Task Force. Available from http://www.entrust.com/news/2004/ corporategovernancetaskforce. pdf?entsrc=isgfullreport. Accessed on 2 April 2008
22. Von Solms R, von Solms, SH (2006) Information Security Governance: A Model Based on the Direct-Control Cycle. Computers & Security, 25(6), 408-412
23. ISO/IEC 27002 (2005). Information Technology-Security Techniques-Code of Practice for Information Security Management. International Organization for Standardization. Available from www.iso.ch
24. Von Solms, SH (2005) Information Security Governance: COBIT or ISO 17799 or Both? Computers & Security, 24(2), 99-104
25. ISO/IEC 27002 (2005). Information Technology-Security Techniques-Code of Practice for Information Security Management. International Organization for Standardization. Available from www.iso.ch
26. COBIT (2005). Control Objectives for Information and Related Technology. Available from ISACA www.isaca.org
27. ISO/IEC 27002 (2005). Information Technology-Security Techniques-Code of Practice for Information Security Management. International Organization for Standardization. Available from www.iso.ch
28. COBIT (2005). Control Objectives for Information and Related Technology. Available from ISACA. www.isaca.org
29. ISO/IEC 27002 (2005). Information Technology-Security Techniques-Code of Practice for Information Security Management. International Organization for Standardization. Available from www.iso.ch
30. COBIT (2005). Control Objectives for Information and Related Technology. Available from ISACA. www.isaca.org
31. ISO/IEC 13335 (2004). Information Technology-Security Techniques-Management of Information and Communications Technology Security-Part 1: Concepts and Models for Information and Communications Technology Security Management. International Organization for Standardization. Available from www.iso.ch
32. ISO/IEC 27002 (2005). Information Technology-Security Techniques-Code of Practice for Information Security Management. International Organization for Standardization. Available from www.iso.ch
33. COBIT (2005). Control Objectives for Information and Related Technology. Available from ISACA. www.isaca.org
34. Von Solms, SH (2005) Information Security Governance-Compliance Management vs Operational Management. Computers & Security, 24(6), 443-447
35. Whitman, ME, Mattord, HJ (2003) Principles of Information Security, Thomson Course Technology, Boston
36. Chapman, A. Conscious Competence Learning Model. Available from http://www.busi nessballs.com/consciouscompetencelearningmodel.htm. Accessed 13 April 2007