Title :
Embedding Information Security into the Organization
Author :
Johnson, M. Eric ; Goetz, Eric
Author_Institution :
Dartmouth Coll., Hanover
Abstract :
Risk and business have always been inseparable, but new information security risks pose unknown challenges. How should firms organize and manage to improve enterprise security? Here, the authors describe how chief information security officer (CISOs) are working to build secure organizations.
Keywords :
security of data; enterprise security; information security risks; intellectual property; Banking; Business; Chemicals; Companies; Computer security; Information security; Privacy; Project management; Protection; Risk management; CISOs; building security in; information security risks; organizational security; security;
Journal_Title :
Security & Privacy, IEEE
DOI :
10.1109/MSP.2007.59
