Document Type

Article

Publication Date

2007

Abstract

Over the past decade management of information systems security has emerged to be a challenging task. Given the increased dependence of businesses on computer-based systems and networks, vulnerabilities of systems abound. Clearly, exclusive reliance on either the technical or the managerial controls is inadequate. Rather, a multifaceted approach is needed. In this paper, based on a panel presented at the 2007 Americas Conference on Information Systems held in Keystone, Colorado, we provide examples of failures in information security, identify challenges for the management of information systems security, and make a case that these challenges require new theory development via examining reference disciplines. We identify these disciplines, recognize applicable research methodologies, and discuss desirable properties of applicable theories.

Comments

The publisher version of record for this article is available at:
Choobineh, J., Dhillon, G., Grimaila, M., & Rees, J. (2007). Management of Information Security: Challenges and Research Directions. Communications of the Association for Information Systems, 20, https://doi.org/10.17705/1CAIS.02057

(c) Association for Information Systems (AIS). Use for profit is not allowed.

DOI

10.17705/1CAIS.02057

Source Publication

Communications of the Association for Information Systems

Share

COinS