Strategic Information Security Management

by Gurpreet Dhillon

This book addresses strategic information security management issues from the perspective of operations and organizational culture. The creation of information security practices requires this dual understanding of operations and human resource practices. Formal controls deal with the rules and procedures that need to be established for bringing about the success of technical controls. Informal controls deal with understanding and dealing with the normative structures that exist within organizations. Experts who deal with the technical aspects of information security often consider management of security issues to be beyond their realm of interest and call upon 'others' to deal with them. Unfortunately there are no 'others' out there. Anyone considering IS security issues is faced with the challenge of managing not only the technical edifice but also the procedural and normative issues that surround the technical implementation of security measures. This book will show how this can be achieved. Increasingly, aspects of information security management are becoming critical for the survival of safe functioning of modern day organizations. The purpose of this book is to equip managers (and those training to be managers) with understanding of issues related with strategic information security management. The book will also present specific tools that managers can use to address the often complex information security problems.

250 pages, Paperback

Published January 15, 2011