Governing Information Security: Governance Domains and Decision Rights Allocation Patterns

View Sample PDF

Author(s): Yu “Andy” Wu (University of North Texas, USA)and Carol Stoak Saunders (University of Central Florida, USA)
Copyright: 2013
Pages: 17
Source title: Managing Information Resources and Technology: Emerging Applications and Theories
Source Author(s)/Editor(s): Mehdi Khosrow-Pour, D.B.A. (Information Resources Management Association, USA)
DOI: 10.4018/978-1-4666-3616-3.ch003

Keywords: Information Resources Management / Information Science Reference / Library & Information Science

Purchase

View Governing Information Security: Governance Domains and Decision Rights Allocation Patterns on the publisher's website for pricing and purchasing information.

Abstract

Governance of the information security function is critical to effective security. In this paper, the authors present a conceptual model for security governance from the perspective of decision rights allocation. Based on Da Veiga and Eloff’s (2007) framework for security governance and two high-level information security documents published by the National Institute of Standards and Technology (NIST), the authors present seven domains of information security governance. For each of the governance domains, they propose a main decision type, using the taxonomy of information technology decisions defined by Weill and Ross (2004). This framework recommends the selection of decision rights allocation patterns that are proper to those decision types to ensure good security decisions. As a result, a balance can be achieved between decisional authority and responsibility for information security.

The IRMA Community

Research IRM

Governing Information Security: Governance Domains and Decision Rights Allocation Patterns

Purchase

Abstract

Related Content

IRMA Sponsors