A Holistic Approach to Information Security Assurance and Risk Management in an Enterprise

View Sample PDF

Author(s): Roy Ng (Ryerson University, Canada)
Copyright: 2009
Pages: 13
Source title: Handbook of Research on Information Security and Assurance
Source Author(s)/Editor(s): Jatinder N. D. Gupta (The University of Alabama in Huntsville, USA)and Sushil Sharma (Ball State University, USA)
DOI: 10.4018/978-1-59904-855-0.ch005

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View A Holistic Approach to Information Security Assurance and Risk Management in an Enterprise on the publisher's website for pricing and purchasing information.

Abstract

The hypergrowth of computing and communications technologies increases security vulnerabilities to organizations. The lack of resources training, the complexity of new technologies, and the slow legislation process to deter the breach of security all constitute to the trends of increasing security risk in an enterprise. Traditional approaches to risk assessment focusing on either the departmental or branch level lacks of an enterprise perspective. Many organizations assess and mitigate security risks from a technology perspective and deploy technology solutions. This approach ignores the importance of assessing security risk in policy and execution. This chapter discusses a systematic and holistic approach to managing security risk. An approach that utilizes the information life cycle and information assurance (IA) assessment points for the creation of policy, monitoring, auditing of security performance, regulate, and initiate corrective action to minimize vulnerabilities. An “information life cycle” is being proposed with its stage value and the underlying security operatives (gate-points) to protect the information. An information assurance framework and its functions to audit the information security implemented in an enterprise are proposed. Organization must assess the value and the business impact of the information, so that optimal and effective security system and security assurance can be designed.

The IRMA Community

Research IRM

A Holistic Approach to Information Security Assurance and Risk Management in an Enterprise

Purchase

Abstract

Related Content

IRMA Sponsors