Login

Publications  •  Project Statistics

Glossary  •  Schools  •  Disciplines
People Search: 
   
Title/Abstract Search: 

Dissertation Information for Vivid Vicki Chen

NAME:
- Vivid Vicki Chen

DEGREE:
- Ph.D.

DISCIPLINE:
- Library and Information Science

SCHOOL:
- SUNY, Albany (USA) (2012)

ADVISORS:
- Sanjay Goel

COMMITTEE MEMBERS:
- Salvatore Belardo
- George Berg
- Kevin Michael Williams

MPACT Status: Fully Complete

Title: Ensuring the Effectiveness of Information Security Policy: The Development and Validation of an Information Security Policy Model

Abstract: The purpose of this dissertation is to develop and test a conceptual model of an Information Security Policy (ISP) and to measure the benefits that accrue to organizations that implement and deploy such policies. As a result of rapid changes in technology, the importance of computer Information Security Policy (ISP) has increased dramatically. In recent decades, governments and private enterprises have increasingly come to store ever greater amounts of information on computers and on networks. Unfortunately, storing information in this manner not only makes firms engaged in cutting-edge technology vulnerable to hackers, but may also jeopardize customer / employee relations, product sales and R&D (Goel and Chen, 2005). Recent events at Martin Marietta illustrate the impact such intrusions can have on a nation's classified information. Protecting against these threats is critical in helping firms prevent the loss of physical and monetary assets, as well as intellectual property. It is also critical in helping firms defend their reputations.

An ISP constitutes a set of rules that regulate how an organization's resources, assets, information and information systems are managed, protected and distributed within, as well as outside, the organization. An effective ISP should provide assurance that proper security functions are enforced. Unfortunately, there exists no comprehensive or readily agreed upon Information Security Policy model that clearly defines information security policy processes or provides concise guidelines or rules for managing such policies. In an attempt to develop such a model one must rely on either an extant theory or framework, or develop a new one. Fortunately, the information systems development literature is extremely well developed and provides an analogous model that can be extended to the information security problem to help generate an effective ISP model.

The model discussed in this thesis is the result of a careful synthesis of the most widely referenced and validated information systems development models, including Choo's Information Management Cycle Model (2002), Delone and McLean's Information System Success Model (1992, 2003), Ives and Olson's Descriptive Model (1984) and Davis' Technology Acceptance Model (1989).

MPACT Scores for Vivid Vicki Chen

A = 0
C = 0
A+C = 0
T = 0
G = 0
W = 0
TD = 0
TA = 0
calculated 2014-03-10 23:14:27

Advisors and Advisees Graph