论文信息 - Necessary measures: metric-driven information security risk assessment and decision making - 字舞流文

Necessary measures: metric-driven information security risk assessment and decision making

Use measurable, reliable real-world metrics to improve information security decision making.

Loren Paul Rees | Wade H. Baker | Peter S. Tippett | W. Baker | P. Tippett | L. Rees

[1] Huseyin Cavusoglu,et al. The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers , 2004, Int. J. Electron. Commer..

[2] Lawrence A. Gordon,et al. The economics of information security investment , 2002, TSEC.

[3] Marianne Swanson,et al. Security metrics guide for information technology systems , 2003 .

[4] Richard L. Daft,et al. Organizational information requirements, media richness and structural design , 1986 .

[5] Detmar W. Straub,et al. Coping With Systems Risk: Security Planning Models for Management Decision Making , 1998, MIS Q..

[6] Thomas A. Longstaff,et al. A common language for computer security incidents , 1998 .

[7] Huseyin Cavusoglu,et al. Model for Evaluating , 2022 .

[8] Michael E. Whitman. Enemy at the gate: threats to information security , 2003, CACM.