Title :
Choosing a Security Option: The InfoSecure Methodology
Author :
Pfleeger, Shari Lawrence ; Ciszek, Thomas
Author_Institution :
RAND Corp., Santa Monica, CA
Abstract :
A four-step process can help organizations evaluate assets to be protected, potential assailants, and likely methods and tactics. It then pulls the results together as a plan of action for investing in cybersecurity in ways that protect the most critical organizational information and processes.
Keywords :
information management; risk management; security of data; asset protection; cybersecurity; infosecure methodology; organizational asset evaluation; organizational information; organizational process; potential assailants; risk management; security option; Computer industry; Computer security; Contracts; Costs; Documentation; Investments; Production; Profitability; Protection; Risk analysis; information technology; investment; process; security;
Journal_Title :
IT Professional
DOI :
10.1109/MITP.2008.97
