Communications of the Association for Information Systems

Concerns about information security and privacy continue to make headlines in the media and pose serious challenges to business. While there are many good practices that an organization can adopt to manage information security and privacy, there are also underlying areas of contention about the protection of personal information in a digital environment. This ICIS panel considered three challenges facing businesses in developing effective strategies for information security and privacy—innovating with personal information, building robust governance models, and connecting security and privacy with business goals. In the process, the panel brought together a range of research disciplines and senior business representatives to critique current practice and develop a future research agenda.