A Method of Assessing Information System Security Controls

View Sample PDF

Author(s): Malcolm R. Pattinson (University of South Australia, Australia)
Copyright: 2008
Pages: 16
Source title: Information Security and Ethics: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Hamid Nemati (The University of North Carolina at Greensboro, USA)
DOI: 10.4018/978-1-59904-937-3.ch138

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View A Method of Assessing Information System Security Controls on the publisher's website for pricing and purchasing information.

Abstract

This chapter introduces a method of assessing the state of an organization’s information system security by evaluating the effectiveness of the various IS controls that are in place. It describes how the Goal Attainment Scaling (GAS) methodology (Kiresuk, Smith & Cardillo, 1994) was used within a South Australian Government Agency and summarises the results of this research. The major purpose of this research was to investigate whether the GAS methodology is a feasible method of assessing the state of security of an organization’s information systems. Additional objectives of this research were to determine the suitability of the GAS methodology as a self-evaluation tool and its usefulness in determining the extent of compliance with a mandated IS security standard.

The IRMA Community

Research IRM

A Method of Assessing Information System Security Controls

Purchase

Abstract

Related Content

IRMA Sponsors