An Integrated System Theory of Information Security Management

606 Words2 Pages
bulb-icon

Recommended: Risk management theory

1.0 Introduction
Nowadays, information can be classified as valuable than gold because of the effectiveness evidence rather than nonsense word. According to the authors, security is to combine systems, operations and internal controls to ensure the integrity and confidentially of data and operation procedures in an organizations. To ensure the information is under control, IT specialist was created. Many people can access internet without any specific requirement, so plagiarism and steal other information happened without recognize the culprit. The authors have been combine five related theories such as information policy theory, risk management theory, control and audit theory, management system theory and contingency theory.
2.0 Literature Review
2.1 Definitions and coverage
The definitions have been cover by many authors based on their research and opinion. On the whole, it can be classified as existed information security is to control upload and download information, accurately and confidential the information and cover all of the information security management.
2.2 Security policy theory
According to the authors, there is no consistent security policy so far but many authors have proposed to cover this phenomenon. IT specialist must have sense about these issues because of the aim for information security management based on authors are planning, forming consensus, organization, drafting, implementing and reviewing.
2.3 Risk management theory
Planning and investigation are required to detect risk, threats and vulnerability of the information system. The result is to control and cover the level of the organization.
2.4 Control and auditing theory
Information security management should recognize type of risk that c...

... middle of paper ...

...anagement is in demand among organization. They can be as protection or wall for company’s valuable information form misuse by who are not entitled. But need some strategy and guideline to use it. Moreover, the use of ISM can decrease the risk.

Author’s background
Kwo-Shing Hong
Department of Management Information Syatem, National Cheng-Chi University and Overall Planning Department, Control Yuan of Republic of China, Taiwan.
Yen-Ping Chi
Department of management Information System, National Cheng-Cui University, Taiwan
Louis R.Chao
Institute of Management Science, Tamkang University and Control Yuan of Republic of China, Taiwan
Jin-Hsing Tang
Tak Ming Collage, Taipei, Taiwan.

Works Cited

Hong, K., Chi, Y., Chao, L. R., & Tang, J. (2003). An integrated system theory of information security management.Information Management & Computer Security, 11(5), 243-248.

Show More
Related

  • HIPAA, CIA, and Safeguards

    1633 Words  | 4 Pages

    Whitman, M., & Mattord, H. (2010). Management of information security. (3rd ed., p. 6). Boston, MA: Cengage Learning.

    Read More

  • Healthy Body Wellness Center Case Study

    607 Words  | 2 Pages

    Information Security Management System (ISMS) plan offers a systematic process for designing, implementing, maintaining, and auditing an organization’s information system security objectives using Plan-Do-Check-Act (PDCA) process. If a qualified security professional is not employed to continually monitor and review ISMS plan, its effectiveness will tend to deteriorate.

    Read More

  • Homeland Security: The Mission Of Homeland Security

    1035 Words  | 3 Pages

    Security helps the organization meet its business objectives or mission by protecting its physical and financial resources, reputation, legal position, employees, and other tangible and intangible assets through the selection and application of appropriate safeguards. Businesses should establish roles and responsibilities of all personnel and staff members. However, a Chief Information Officer should be appointed to direct an organization’s day to day management of information assets. Supporting roles are performed by the service providers and include systems operations, whose personnel design and operate the computer systems. Each team member must be held accountable in ensuring all of the rules and policies are being followed, as well as, understanding their roles, responsibilities and functions. Organizations information processing systems are vulnerable to many threats that can inflict various types of damage that can result in significant losses (Harris, 2014). Losses can come from actions from trusted employees that defraud the system, outside hackers, or from careless data entry. The major threat to information protection is error and omissions that data entry personnel, users, system operators and programmers make. To better protect business information resources, organizations should conduct a risk analysis to see what

    Read More

  • New-Hire Onboarding and Information Security

    994 Words  | 2 Pages

    Whitman, M. E., & Mattord, H. J. (2011). Principles of information security. Boston, Mass: Thomson Course Technology.

    Read More

  • Information Security: The John McCumber Model

    1132 Words  | 3 Pages

    There are number of different models proposed as framework for information security but one of the best model is McCumber model which was designed by John McCumber. In this model the elements to be studied are organized in a cube structure, in which each axis indicates a dissimilar viewpoint of some information security issue and there are three major modules in each axis. This model with 27 little cubes all organized together looks similar like a Rubik's cube. There are three axes in the cube they are: goals desired, Information states, and measures to be taken. At the intersection of three axes you can research on all angles of an information security problem.

    Read More

  • Information Security Breach Paper

    693 Words  | 2 Pages

    Create a team with the following areas of expertise: Human Resources (HR), Legal, Technology, and other key business lines. The HR, Legal, and Technology team members will have a good understanding of the current policies related to information security. Moreover, such a team will be a fair representation of each area of the organization. Information Security Awareness needs to be an organizational-wide effort and must be presented in the same manner. (Wilson, M. & Hash, J,2003)

    Read More

  • Security And The OSI Model

    1411 Words  | 3 Pages

    After looking into each of the seven layers in the OSI model it is apparent that there are many ways to exploit a security flaw within a system. A good security analyst has to look at the overall picture to keep the entire system secure and not just one or two layers. Information technology security measures are not a one time fix; it is a continuous process that must occur to keep pace with ever changing protocols, applications, and the ingenuity of attackers.

    Read More

  • Cobit 5 Essay

    1067 Words  | 3 Pages

    Introduction The world is affected by the rapid innovation of technology. The technology helps to transform an idea into a reality which affects the daily activities of an individual and organization. It also affects the interaction among individuals by communicating with each other. The IT auditing and information security system is gaining more significance today as being one of the major element of Information Technology. Therefore, organizations are investing more time and effort to provide the best IT infrastructures in society, universities, schools, businesses, hospital, and other government sectors which focuses on the use of IT auditing to maintain the security and protection of their IT systems.

    Read More

  • Kart's Food Industries Sdn Bhd

    1388 Words  | 3 Pages

    2. Propose method by which IS/IT strategies may be implemented in an organization to overcome challenges as were found from the analysis above.

    Read More

  • Information Security

    2693 Words  | 6 Pages

    The first thing that we must consider about Information Security is that there is not a final destination at which we can arrive. IT Security is an ongoing set of processes and activities that requires attention and expertise on a daily basis. It is important to understand that systems are not secured by themselves and it is our responsibility to maintain and improve them periodically as required. It is of vital importance to establish the appropriate mechanisms and requirements in order to support the company’s CIA triad. The following report will provide you guidance about auditing and hardening techniques applied though the 7 Domains by utilizing IT Security Best Practices.

    Read More

  • An Overview of Airline Hijacking

    1662 Words  | 4 Pages

    Fay, J. (1993) The 'Standard' of the 'Standard' Encyclopedia of Security Management: Techniques & Technology. Burlington, MA: Elsevier, Inc. Hollanda, R. (2009).

    Read More

  • The Systems Theory of Management

    661 Words  | 2 Pages

    The systems theory of management offers the adherents a wide perspective on the organizations they are charged with watching. “It provides a framework for visualizing internal and external environmental factors as an integrated whole” (Johnson, Kask, & Rosenweig, 1964). This interdisciplinary approach to managing a system or organization prepares a manager for all possible perturbations of the system in question.

    Read More

  • Technology Management Advantages And Disadvantages

    990 Words  | 2 Pages

    Advanced information technology management contain some of the basic functions of management, for instance organizing, staffing, budgeting and control, but it also has functions that are exclusive to IT, such as network planning, software development, change management and tech support. Usually, Information technology management is used by organizations to support and complete their business operations. Having an Information technology management department in organization or company will brought many advantages and convenience to employees. It’s also help the employees in the company done their stuff or work by much more efficient and effectiveness. Some organizations use information technology management as the core or center of their business.

    Read More

  • open source

    1136 Words  | 3 Pages

    In literature and research multiple definitions of ICT can be found in the fields of science and technology by looking at various fields of technological aspects. UNESCO Bangkok defines ICT as the representative of all forms of devices that can manipulate information with the use of electronic means (2007, 1). The manipulation of information concerns many vulnerabilities and threats. These threats can cause major damage in system functionality. The process of detecting and eliminating these threats or vulnerabilities to ensure the reliability and confidentiality of data in any ICT system are known as ICT security (Bakari 2007, 4-5).

    Read More

  • The Importance Of Computer Security

    1495 Words  | 3 Pages

    In our digital world computers a stuff of can’t be replaced. Computers in addition to assist we keep our important data in computers and also can assist we constant innovation. However, there are many criminals while utilize it for make criminal cases. Such as, theft other people bank account so that theft other people money on their bank account and utilize network for deceit other people’s private information. Therefore, we need computer security for prevent these criminal cases. Computer security is information security applied network and computers. This is because, computer security can help our private information will not be leak so that criminals could not take advantages of us. Furthermore, computer security is software applied in computers and World Wide Web when we want to access web site in World Wide Web we will get variety of viruses. This is because, viruses will damage our important data in computers that cause we could not work smoothly. Besides that, computer security also is our finance protector. This is because, many criminals cases also regarding bank account be stolen. So we need by way of computer security to safeguard our will not get pecuniary loss.

    Read More

More about An Integrated System Theory of Information Security Management

Open Document