Part I: The Inhibiting Role of Unrealistic Optimism in Providers’ IT Security Risk Management

2015 ◽  
pp. 35-92
Author(s):  
André Loske
Keyword(s):  
Risk Management ◽  
It Security ◽  
Unrealistic Optimism ◽  
Security Risk ◽  
Security Risk Management

IT Security Risk Management Model for Cloud Computing

2013 ◽  
Vol 4 (4) ◽  
pp. 1-19 ◽  
Author(s):  
Gunnar Wahlgren ◽  
Stewart Kowalski
Keyword(s):  
Cloud Computing ◽  
Risk Management ◽  
It Security ◽  
Maturity Model ◽  
Security Risk ◽  
Cloud Computing Environment ◽  
New Approach ◽  
Capability Maturity ◽  
Security Risk Management ◽  
Security Incidents

The authors combined ISO 27005 framework for IT Security Risk Management with NIST Multitier framework. With this combined framework the authors create a new approach to IT Security Risk Management where IT Security Risk Management is place at the strategic, tactical and operational levels of an organizational. In this paper the authors concentrate on the monitoring and communication steps of IT Security Risk Management and especially escalation of new IT Security Incidents. The authors present a first draft to an IT Security Risk Escalation Capability Maturity Model based on ISACA´s Risk IT Framework. Finally the authors apply the approach to typical cloud computing environment as a first step to evaluate this new approach.

Network externalities, layered protection and IT security risk management

2007 ◽  
Vol 44 (1) ◽  
pp. 1-16 ◽  
Author(s):  
Wei T. Yue ◽  
Metin Çakanyıldırım ◽  
Young U. Ryu ◽  
Dengpan Liu
Keyword(s):  
Risk Management ◽  
Network Externalities ◽  
It Security ◽  
Security Risk ◽  
Security Risk Management
Sign in / Sign up

Export Citation Format

Share Document