SOX Act and IT Security Governance

2008 ◽  
Author(s):  
Na-yun Kim ◽  
Rosslin John Robles ◽  
Sung-Eon Cho ◽  
Yang-Seon Lee ◽  
Tai-hoon Kim
Keyword(s):  
It Security ◽  
Security Governance

IT Security Governance and Centralized Security Controls

2008 ◽  
pp. 2130-2138
Author(s):  
Merrill Warkentin ◽  
Allen C. Johnston
Keyword(s):  
Information Technology ◽  
Human Activities ◽  
It Governance ◽  
Central Issue ◽  
It Security ◽  
Security Governance ◽  
Security Controls ◽  
Policies And Procedures ◽  
Enterprise Security ◽  
Over Time

Every enterprise must establish and maintain information technology (IT) governance procedures that will ensure the execution of the firm’s security policies and procedures. This chapter presents the problem and the framework for ensuring that the organization’s policies are implemented over time. Since many of these policies require human involvement (employee and customer actions, for example), the goals are met only if such human activities can be influenced and monitored and if positive outcomes are rewarded while negative actions are sanctioned. This is the challenge to IT governance. One central issue in the context of IT security governance is the degree to which IT security controls should be centralized or decentralized. This issue is discussed in the context of enterprise security management.

IT Security Governance and Centralized Security Controls

2011 ◽  
pp. 16-24 ◽  
Author(s):  
Merrill Warkentin ◽  
Allen C. Johnston
Keyword(s):  
Information Technology ◽  
Human Activities ◽  
It Governance ◽  
Central Issue ◽  
It Security ◽  
Security Governance ◽  
Security Controls ◽  
Policies And Procedures ◽  
Enterprise Security ◽  
Over Time

Every enterprise must establish and maintain information technology (IT) governance procedures that will ensure the execution of the firm’s security policies and procedures. This chapter presents the problem and the framework for ensuring that the organization’s policies are implemented over time. Since many of these policies require human involvement (employee and customer actions, for example), the goals are met only if such human activities can be influenced and monitored and if positive outcomes are rewarded while negative actions are sanctioned. This is the challenge to IT governance. One central issue in the context of IT security governance is the degree to which IT security controls should be centralized or decentralized. This issue is discussed in the context of enterprise security management.

Sign in / Sign up

Export Citation Format

Share Document