Information Security Governance: A model based on the Direct-Control Cycle

Rossouw von Solms; S. H. (Basie) von Solms

doi:10.1016/j.cose.2006.07.005

Information Security Governance: A model based on the Direct-Control Cycle

Rossouw von Solms, S. H. (Basie) von Solms

Academy of Computer Science and Software Engineering

Nelson Mandela University

Research output: Contribution to journal › Article › peer-review

80 Citations (Scopus)

Abstract

It is generally accepted that Information Security Governance is an integral part of Corporate Governance. It is therefore essential for any company to have a proper Information Security Governance program which reflects this integration with Corporate Governance. One of the core principles of Governance, and specifically Corporate Governance, is the Direct-Control Cycle which, in its simplest form, 'prescribes' and 'checks'. This paper presents an Information Security Governance model based on this cycle.

Original language	English
Pages (from-to)	408-412
Number of pages	5
Journal	Computers and Security
Volume	25
Issue number	6
DOIs	https://doi.org/10.1016/j.cose.2006.07.005
Publication status	Published - Sept 2006

Keywords

Compliance enforcement
Corporate Governance
Direct-Control Cycle
Governance
Information Security Governance
Management levels

ASJC Scopus subject areas

General Computer Science
Law

Access to Document

10.1016/j.cose.2006.07.005

Cite this

@article{ea23f3acb40f449bbf53acbbd5ac3c9c,

title = "Information Security Governance: A model based on the Direct-Control Cycle",

abstract = "It is generally accepted that Information Security Governance is an integral part of Corporate Governance. It is therefore essential for any company to have a proper Information Security Governance program which reflects this integration with Corporate Governance. One of the core principles of Governance, and specifically Corporate Governance, is the Direct-Control Cycle which, in its simplest form, 'prescribes' and 'checks'. This paper presents an Information Security Governance model based on this cycle.",

keywords = "Compliance enforcement, Corporate Governance, Direct-Control Cycle, Governance, Information Security Governance, Management levels",

author = "{von Solms}, Rossouw and {(Basie) von Solms}, {S. H.}",

year = "2006",

month = sep,

doi = "10.1016/j.cose.2006.07.005",

language = "English",

volume = "25",

pages = "408--412",

journal = "Computers and Security",

issn = "0167-4048",

publisher = "Elsevier Ltd.",

number = "6",

}

TY - JOUR

T1 - Information Security Governance

T2 - A model based on the Direct-Control Cycle

AU - von Solms, Rossouw

AU - (Basie) von Solms, S. H.

PY - 2006/9

Y1 - 2006/9

N2 - It is generally accepted that Information Security Governance is an integral part of Corporate Governance. It is therefore essential for any company to have a proper Information Security Governance program which reflects this integration with Corporate Governance. One of the core principles of Governance, and specifically Corporate Governance, is the Direct-Control Cycle which, in its simplest form, 'prescribes' and 'checks'. This paper presents an Information Security Governance model based on this cycle.

AB - It is generally accepted that Information Security Governance is an integral part of Corporate Governance. It is therefore essential for any company to have a proper Information Security Governance program which reflects this integration with Corporate Governance. One of the core principles of Governance, and specifically Corporate Governance, is the Direct-Control Cycle which, in its simplest form, 'prescribes' and 'checks'. This paper presents an Information Security Governance model based on this cycle.

KW - Compliance enforcement

KW - Corporate Governance

KW - Direct-Control Cycle

KW - Governance

KW - Information Security Governance

KW - Management levels

UR - http://www.scopus.com/inward/record.url?scp=33748116536&partnerID=8YFLogxK

U2 - 10.1016/j.cose.2006.07.005

DO - 10.1016/j.cose.2006.07.005

M3 - Article

AN - SCOPUS:33748116536

SN - 0167-4048

VL - 25

SP - 408

EP - 412

JO - Computers and Security

JF - Computers and Security

IS - 6

ER -

Information Security Governance: A model based on the Direct-Control Cycle

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this