Information Security Governance: When Compliance Becomes More Important than Security - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2010

Information Security Governance: When Compliance Becomes More Important than Security

Résumé

Current security governance is often based on a centralized decision making model and still uses an ineffective 20th century risk management approach to security. This approach is relatively simple to manage since it needs almost no security governance below the top enterprise level where most decisions are made. However, while there is a role for more corporate governance, new regulations, and improved codes of best practice to address current weak organizational security practices, this may not be sufficient in the current dynamic security environment. Organizational information security must adapt to changing conditions by extending security governance to middle management as well as system/network administrators. Unfortunately the lack of clear business security objectives and strategies at the business unit level is likely to result in a compliance culture, where those responsible for implementing information security are more interested in complying with organizational standards and policies than improving security itself.
Fichier principal
Vignette du fichier
5-Paper-158-Information_Security_Governance-When_Compliance_Becomes_more_Important_than_Security-Tan_Terence.pdf (390.01 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01054503 , version 1 (07-08-2014)

Licence

Paternité

Identifiants

Citer

Terence C. C. Tan, Anthonie B. Ruighaver, Atif Ahmad. Information Security Governance: When Compliance Becomes More Important than Security. 25th IFIP TC 11 International Information Security Conference (SEC) / Held as Part of World Computer Congress (WCC), Sep 2010, Brisbane, Australia. pp.55-67, ⟨10.1007/978-3-642-15257-3_6⟩. ⟨hal-01054503⟩
141 Consultations
618 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More