Information Security Governance - Compliance management vs operational management

S. H. Von Solms

doi:10.1016/j.cose.2005.07.003

Information Security Governance - Compliance management vs operational management

S. H. Von Solms

Academy of Computer Science and Software Engineering

Research output: Contribution to journal › Article › peer-review

94 Citations (Scopus)

Abstract

This paper discusses the difference that should exist between Information Security Operational Management and Information Security Compliance Management. The paper argues that for good Information Security Governance, good IT Governance and good Corporate Governance, these two dimensions of Information Security Management should be totally separate, and housed in separate departments.

Original language	English
Pages (from-to)	443-447
Number of pages	5
Journal	Computers and Security
Volume	24
Issue number	6
DOIs	https://doi.org/10.1016/j.cose.2005.07.003
Publication status	Published - Sept 2005

Keywords

Compliance management
Corporate governance
Information security
Information security management
Information technology governance
Operational management
Risk management

ASJC Scopus subject areas

General Computer Science
Law

Access to Document

10.1016/j.cose.2005.07.003

Cite this

@article{d007e1bbde434d0f9db9a644314e2973,

title = "Information Security Governance - Compliance management vs operational management",

abstract = "This paper discusses the difference that should exist between Information Security Operational Management and Information Security Compliance Management. The paper argues that for good Information Security Governance, good IT Governance and good Corporate Governance, these two dimensions of Information Security Management should be totally separate, and housed in separate departments.",

keywords = "Compliance management, Corporate governance, Information security, Information security management, Information technology governance, Operational management, Risk management",

author = "{Von Solms}, {S. H.}",

year = "2005",

month = sep,

doi = "10.1016/j.cose.2005.07.003",

language = "English",

volume = "24",

pages = "443--447",

journal = "Computers and Security",

issn = "0167-4048",

publisher = "Elsevier Ltd.",

number = "6",

}

TY - JOUR

T1 - Information Security Governance - Compliance management vs operational management

AU - Von Solms, S. H.

PY - 2005/9

Y1 - 2005/9

N2 - This paper discusses the difference that should exist between Information Security Operational Management and Information Security Compliance Management. The paper argues that for good Information Security Governance, good IT Governance and good Corporate Governance, these two dimensions of Information Security Management should be totally separate, and housed in separate departments.

AB - This paper discusses the difference that should exist between Information Security Operational Management and Information Security Compliance Management. The paper argues that for good Information Security Governance, good IT Governance and good Corporate Governance, these two dimensions of Information Security Management should be totally separate, and housed in separate departments.

KW - Compliance management

KW - Corporate governance

KW - Information security

KW - Information security management

KW - Information technology governance

KW - Operational management

KW - Risk management

UR - http://www.scopus.com/inward/record.url?scp=24644448811&partnerID=8YFLogxK

U2 - 10.1016/j.cose.2005.07.003

DO - 10.1016/j.cose.2005.07.003

M3 - Article

AN - SCOPUS:24644448811

SN - 0167-4048

VL - 24

SP - 443

EP - 447

JO - Computers and Security

JF - Computers and Security

IS - 6

ER -

Information Security Governance - Compliance management vs operational management

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this