This paper is an extension of previous research which developed a framework for evaluating and improving the quality of Entity Relationship models. The framework has now been used extensively in practice, including implementation in two of the largest commercial organisations in Australia. The experiences gained have been used to further develop and refine the framework. This paper describes how the framework has been used in an action research programme to quality assure individual data models as part of application development projects (product quality) and to reengineer application development procedures to build quality into the data modelling process (process quality). The results show that use of the framework has the potential to significantly improve the practice of data modelling.

Improving the quality of entity relationship models: An action research programme

The threat from within

Risk in Information Systems Security can be defined as a function of a given threat source's exercising a particular vulnerability, and the resulting impact of that adverse event on the organization. Risk management is the process of identifying and assessing risk and taking steps to reduce it to an acceptable level, given the costs involved in doing so. The objective of this research is to assess the current state of practice in conducting risk assessments for information security policy management and to make recommendations to managers to improve their risk assessment activities. We also wish to provide researchers with direction for areas requiring further study. Results from the exploratory survey of U.S. headquartered firms indicate that while overall, respondents are not completely dissatisfied with their risk assessment choices, better models and techniques for risk assessment for information security planning and management are required.

/pdf/the-state-of-risk-assessment-practices-in-information-2snzxbanln.pdf

The state of risk assessment practices in information security: an exploratory investigation

............................................................................................................................................... xiii Chapter

Measuring the effectiveness of an information security training and awareness program

Considerable research effort has been devoted to the study of Policy in the domain of Information Security Management (ISM). However, our review of ISM literature identified four key deficiencies that reduce the utility of the guidance to organisations implementing policy management practices. This paper provides a comprehensive overview of the management practices of information security policy and develops a practice-based model that addresses the four aforementioned deficiencies. The model provides comprehensive guidance to practitioners on the activities security managers must undertake for security policy development and allows practitioners to benchmark their current practice with the models suggested best practice. The model contributes to theory by mapping existing information security policy research in terms of the defined management practices.

Information Security Policy: A Management Practice Perspective

................................................................................................................... II DECLARATION ................................................................................................................. IV ACKNOWLEDGEMENTS ..................................................................................................... V CHAPTER 1.  INTRODUCTION ........................................................................................... 1 1.1.  INTRODUCTION ............................................................................................................. 1 1.2.  STUDY BACKGROUND .................................................................................................... 3 1.3.  RATIONALE FOR PROJECT ............................................................................................... 8 1.4.  RESEARCH QUESTION .................................................................................................. 10 1.5.  UNDERSTANDING KEY TERMS ....................................................................................... 11 1.5.1.  Policy ............................................................................................................... 12 1.5.2.  Strategic Information Security Policy ............................................................. 12 1.5.3.  Quality ............................................................................................................ 13 1.6.  GLOSSARY .................................................................................................................. 14 1.7.  RESEARCH SCOPE ........................................................................................................ 16 1.8.  RESEARCH CONSTRAINTS .............................................................................................. 16 1.9.  RESEARCH CONTRIBUTION ............................................................................................ 17 1.10.  OUTLINE OF THESIS ..................................................................................................... 18 CHAPTER 2.  LITERATURE REVIEW ................................................................................. 20 2.1.  INTRODUCTION ........................................................................................................... 20 2.2.  THE MULTIPLE CONSTITUENCY APPROACH ...................................................................... 21 2.2.1.  Identification of Constituent Groups .............................................................. 22 2.2.2.  Handling Multiple Sets of Effectiveness Criteria ............................................. 23 2.2.2.1.  The Power Stance ................................................................................... 23 2.2.2.2.  The Social Justice Stance ........................................................................ 24 2.2.2.3.  The Evolutionary Stance ......................................................................... 25 2.2.2.4.  The Relativistic Stance ............................................................................ 25 2.2.3.  Use of the Multiple Constituency Approach in Information Security Policy Quality Assessment ...................................................................................... 26 2.3.  QUALITY IN SECURITY POLICY RESEARCH ......................................................................... 26 2.3.1.  Security Policy Quality .................................................................................... 27 2.3.1.1.  Public Policy Quality ............................................................................... 29 2.3.1.2.  Security Evaluation of Information Systems .......................................... 31 2.3.1.2.1. Standards for Security ............................................................................ 32 2.3.1.3.  The Security Audit .................................................................................. 33 2.3.2.  Security Policy Development and Issues ......................................................... 36 2.3.2.1.  Security Policy Development Methods .................................................. 38 2.3.2.1.1. The Template Approach ......................................................................... 38 2.3.2.1.2. The Authoritative Policy Statement Approach ...................................... 39 2.3.2.1.3. The Process Oriented Approaches ......................................................... 41

Strategic information security policy quality assessment: a multiple constituency perspective

Handle everyday research tasks with reliable, citation-backed results

Your personal Research Agent to handle research tasks with citation-backed results

Popular Tasks used by Researchers

How can I help with your research?

Meet SciSpace

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Sean Maynard

Author Tools

Chat about Author

Papers

Strategic information security policy quality assessment: a multiple constituency perspective