Security and Risk Management

View Sample PDF

Author(s): S.C. Lenny Koh (University of Sheffield, UK)and Stuart Maguire (University of Sheffield, UK)
Copyright: 2009
Pages: 8
Source title: Information and Communication Technologies Management in Turbulent Business Environments
Source Author(s)/Editor(s): S.C. Lenny Koh (University of Sheffield, UK)and Stuart Maguire (University of Sheffield, UK)
DOI: 10.4018/978-1-60566-424-8.ch016

Keywords: Business Information Systems / Business Science Reference / Information Resources Management / Library & Information Science

Purchase

View Security and Risk Management on the publisher's website for pricing and purchasing information.

Abstract

In information terms, security can be defined as the processes of ensuring that private information remains private and uncompromised in an atmosphere where all other information is free. Security techniques such as encryption, passwords, and firewalls are designed to prevent unauthorized access to information, to protect the integrity of computing resources, and to limit the potential damage that can be caused by attackers and intruders. The notion of a “secure computer” is relative though: the only truly secure computer is one powered down in a locked facility that no one has access to. Risk management is the ongoing process of assessing the risk to automated information resources. It is part of a risk-based approach used to determine adequate security for a system by analysing the threats and vulnerabilities and selecting appropriate cost-effective controls to achieve and maintain an acceptable level of risk (Maguire, 2002).

The IRMA Community

Research IRM

Security and Risk Management

Purchase

Abstract

Related Content

IRMA Sponsors