Welcome guest
Information security management and modelling
Lam-for Kwok, Dennis Longley
Information Management & Computer Security
1999
30 - 40
0968-5227
10.1108/09685229910255179
MCB UP Ltd
Information security management has been placed on a firmer footing with the publication of standards by national bodies. These standards provide an opportunity for security managers to gain senior management recognition of the importance of procedures and mechanisms to enhance information security. They may also place demands on security managers to provide convincing demonstration of conformance to the standards. The risk data repository (RDR) computer model described in this paper was developed to manage organisational information security data and facilitate risk analysis studies. The RDR provides a form of computer documentation that can assist the security officer to maintain a continuous record of the organisational information security scenario and facilitate system security development, business continuity planning and standards conformance audits.
Computer security, Data security, Information systems, Modelling, Risk management, Standards
Research paper