Distributed information security: responsibility assignments and costs

Preserving information security in distributed and outsourced environments is a growing challenge for IS management. This article describes how the responsibility for information security activities should be allocated throughout a company with decentralized IS resources. In addition, the article provides a basis for estimating the cost of Implementing information security in these environments.