An analysis of the traditional IS security approaches: implications for research and practice

No abstract is available for this paper.

• Publication year

  2005

• Venue

  European Journal of Information Systems

• Publication date

  2005-09-01

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1057/palgrave.ejis.3000537
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Analysis of modern IS security development approaches: towards the next generation of social and adaptable ISS methods

  2005influential reference
• Metrics based security assessment (MBSA): combining the ISO 17799 standard with the systems security engineering capability maturity model (SSE-CMM)

  2004cited by this paper
• Information Systems Research - Relevant Theory and Informed Practice, edited proceedings of the WG8.2 conference, Relevant Theory and Informed Practice: Looking Forward from a 20-Year Perspective on IS Research, Manchester, UK, July 2004

  2004cited by this paper
• An Analysis of the Growth of Computer and Internet Security Breaches

  2003cited by this paper
• Analyzing the Past to Prepare for the Future: Writing a Literature Review

  2002cited by this paper
• Improving the Protection of Assets in Open Distributed Systems by Use of X-ifying Risk Analysis

  2001influential reference
• Current directions in IS security research: towards socio‐organizational perspectives

  2001cited by this paper
• THE POVERTY OF SCIENTISM IN INFORMATION SYSTEMS

  2000cited by this paper
• Managing Security Functions Using Security Standards

  2000cited by this paper
• Information Security Management: A Hierarchical Framework for Various Approaches

  2000cited by this paper
• INFORMATION SYSTEMS EPISTEMOLOGY: AN HISTORICAL PERSPECTIVE

  2000cited by this paper
• Research Questions Guiding Selection of an Appropriate Research Method

  2000cited by this paper
• Information Security: Process Evaluation and Product Evaluation

  2000cited by this paper
• A Dynamic Framework for Classifying Information Systems Development Methodologies and Approaches

  2000cited by this paper
• From Trusted Information Security Controls to a Trusted Information Security Environment

  2000cited by this paper
• Information Security Management

  2000cited by this paper
• Information security management: why standards are important

  1999cited by this paper
• A Set of Principles for Conducting and Evaluating Interpretive Field Studies in Information Systems

  1999cited by this paper
• Generally Accepted System Security Principles Release for Public Comment

  1999cited by this paper
• A Paradigmatic Analysis Contrasting Information Systems Development Approaches and Methodologies

  1998cited by this paper
• Computer Security Research: A British Perspective

  1998influential reference
• Information security management (3): the Code of Practice for Information Security Management (BS 7799)

  1998cited by this paper
• Code of Practice: A Standard for Information Security Management

  1997cited by this paper
• A process standard for system security engineering: development experiences and pilot results

  1997cited by this paper
• Driving safely on the information superhighway

  1997cited by this paper
• A business approach to effective information technology risk analysis and management

  1996influential reference
• Electronic communications risk management: A checklist for business managers

  1996influential reference
• Baseline Security Guidelines for Health Care Management

  1996influential reference
• Exploring the intellectual structures of information systems development: A social action theoretic analysis

  1996cited by this paper
• Analyzing Information Systems Development a Comparison and Analysis of Eight IS Development Approaches

  1996influential reference
• Information security management: The second generation

  1996cited by this paper
• Information security baselines

  1995cited by this paper
• The Emergence of Interpretivism in IS Research

  1995cited by this paper
• Information systems development and data modelling: conceptual and philosophical foundations

  1995cited by this paper
• Why cryptosystems fail

  1994influential reference
• Information systems security design methods: implications for information systems development

  1993influential reference
• Risk analysis: an interpretive feasibility tool in justifying information systems security

  1991influential reference
• A paradigmatic analysis of contemporary schools of IS development

  1991cited by this paper
• Designing information systems security

  1988cited by this paper
• Principles and procedures of the LRAM approach to information systems risk analysis and management

  1987influential reference
• Computer Security: A Comprehensive Controls Checklist

  1987cited by this paper
• Radical Developments in Accounting Thought

  1986influential reference
• Measuring computer system security using software security metrics

  1984influential reference
• The Theory of Communicative Action: Reason and the Rationalization of Society

  1984cited by this paper
• A Sociocybernetic Framework for the Feature Analysis of Information Systems Design Methodologies

  1983cited by this paper
• Sociological Paradigms and Organizational Analysis.

  1983cited by this paper
• Safe: Security Audit and Field Evaluation for Computer Facilities and Information Systems

  1981cited by this paper
• Sociological Paradigms and Organizational Analysis

  1979cited by this paper
• Security : Checklist for computer center self-audits

  1979cited by this paper

• Managing intellectual property leakage in the digital era: An integrated process model

  2026cites this paper
• The Damocles Sword of Cyber Attacks

  2025influential citation
• Information Security Research in the Information Systems Discipline: A Thematic Review and Future Research Directions

  2024cites this paper
• The whole of cyber defense: Syncing practice and theory

  2024cites this paper
• A Qualitative Multi-Method Study of U.S. Banks’ Financial Reporting Addressing Security Risk Management (SRM) Operational Effectiveness and SRM Maturity

  2024cites this paper
• Conflict Resolution in an ISO/IEC 27001 Standard Implementation: A Contradiction Management Perspective

  2023cites this paper
• Digital Transformation Security Challenges

  2022cites this paper
• Critical Success Factors for an Effective Security Risk Management Program

  2022cites this paper
• Challenges of Managing Information Security during the Pandemic

  2021cites this paper
• Digital Transformation and IT Security Issues - Analyzing Organizational Decision-Making Processes through a Behavioral Lens

  2021cites this paper
• Leveraging human factors in cybersecurity: an integrated methodological approach

  2021cites this paper
• A Semiotic Examination of the Security Policy Lifecycle

  2021cites this paper
• Information systems security research agenda: Exploring the gap between research and practice

  2021cites this paper
• Information Security Research within the Information Systems Information Security Research within the Information Systems Discipline: Analyzing, Categorizing, and Classifying the Historical Discipline: Analyzing, Categorizing, and Classifying the Historical Underpinnings and Theoretical Assumptions

  2020cites this paper
• Can cyber risk management insurance mitigate healthcare providers’ intentions to resist electronic medical records?

  2020cites this paper
• State of the art in information security policy development

  2020cites this paper
• More honour'd in the breach: predicting non-compliant behaviour through individual, situational and habitual factors

  2020cites this paper
• Coronavirus Social Engineering Attacks: Issues and Recommendations

  2020cites this paper
• The Impact of Awareness of Being Monitored on Computer Usage Policy Compliance: An Agency View

  2019cites this paper
• Integrating Cognition with an Affective Lens to Better Understand Information Security Policy Compliance

  2019influential citation
• Investigating the Security Divide between SME and Large Companies: How SME Characteristics Influence Organizational IT Security Investments

  2019cites this paper
• The Effects of Cyber Supply Chain Risk Management in Financial Industry

  2019cites this paper
• A Review of Information Systems Security Management: An Integrated Framework

  2019cites this paper
• Abductive innovations in information security policy development: an ethnographic study

  2019influential citation
• A Resource View of Information Security Incident Response

  2018cites this paper
• 1-2014 Web Engineering Security ( WES ) Methodology

  2018cites this paper
• Strategic value alignment for information security management: a critical success factor analysis

  2018cites this paper
• Information security management practices in organisations

  2018cites this paper
• Advances in Cybersecurity Design: An Integrated Framework to Quantify the Economic Impacts of Cyber-Terrorist Behavior

  2018cites this paper
• A Review of Ethical Issue Considerations in the Information Systems Research Literature

  2018cites this paper
• Factors that Affect the Success of Security Education, Training, and Awareness Programs: A Literature Review

  2018cites this paper
• Strategic Planning for IS Security: Designing Objectives

  2018cites this paper
• Designing for a Digital and Globalized World

  2018cites this paper
• Information security management and the human aspect in organizations

  2017cites this paper
• Awareness of information security and its implications to legal and ethical issues in our daily life

  2017cites this paper
• A Study of Employees’ Information Security Policy Violation and Rational Choice Theory

  2017cites this paper
• Development of a Model of Individual, Contextual and Situational Factors to Predict Compliant Behavior.

  2017cites this paper
• Information systems security policy implementation in practice: from best practices to situated practices

  2017cites this paper
• Towards analysing the rationale of information security non-compliance: Devising a Value-Based Compliance analysis method

  2017cites this paper
• Investigating the Development of a Multi-objective Decision Model that Seeks to Generate Informed Alternatives for Maximizing IS Security within an Organization

  2017cites this paper
• Beyond Cybersecurity Awareness: Antecedents and Satisfaction

  2017cites this paper
• The human element in information security : an analysis of social engineering attacks in the greater Tshwane area of Gauteng, South Africa

  2017cites this paper
• Tightroping between APT and BCI in small enterprises

  2017cites this paper
• A METHOD FOR INFORMATION CLASSIFICATION

  2017cites this paper
• Taking promotion and prevention mechanisms matter for information systems security policy in Chinese SMEs

  2016cites this paper
• Economic Disruptions, Business Continuity Planning and Disaster Forensic Analysis: The Hawaii Business Recovery Center (HIBRC) Project

  2016cites this paper
• Shaping information security behaviors related to social engineering attacks

  2016cites this paper
• Shaping intention to resist social engineering through transformational leadership, information security culture and awareness

  2016cites this paper
• Asset Identification in Information Security Risk Assessment: A Business Practice Approach

  2016cites this paper
• Inter-organisational information security: a systematic literature review

  2016cites this paper
• A Practice Lens for Understanding the Organizational and Social Challenges of Information Security Management

  2016cites this paper
• Which are the Most Effective Measures for Improving Employees' Security Compliance?

  2015cites this paper
• Evolvement of Information Security Research on Employees' Behavior: A Systematic Review and Future Direction

  2015cites this paper
• Dynamics of Data Breaches in Online Social Networks: Understanding Threats to Organizational Information Security Reputation

  2015cites this paper
• Proposing the control‐reactance compliance model (CRCM) to explain opposing motivations to comply with organisational information security policies

  2015cites this paper
• A system dynamics model for information security management

  2015cites this paper
• IT Security Risk Management in the Context of Cloud Computing

  2015cites this paper
• Disassociations in Security Policy Lifecycles

  2015cites this paper
• Investigating Roles of Information Security Strategy

  2015influential citation
• Enablers of Information Security Culture

  2015cites this paper
• Collective Security Efficacy and Group Security Compliance

  2014cites this paper
• A Model of Information Security Awareness for Assessing Information Security Risk for Emerging Technologies

  2014influential citation
• Web Engineering Security (WES) Methodology

  2014cites this paper
• Collective Security Efficacy and Group Security Compliance Research-in-Progress

  2014cites this paper
• INFOSEC in a Basket, 2004-2013

  2014cites this paper
• Understanding organisational response to institutional pressures in information security management : two Chinese case studies

  2014influential citation
• Towards a Holistic Understanding of Security Process: Formal Controls and Informal Relationships

  2014cites this paper
• Vulnerability identification errors in security risk assessments

  2014cites this paper
• The Impact of Computer Monitoring on Policy Compliance: An Agency and Stewardship View Submission Type: Research-in-Progress

  2014cites this paper
• Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture

  2014cites this paper
• Information systems security management maturity modelfor electronic commerce small medium industries andenterprises (smi/e) using technology, organization andenvironment framework / Azah Anir Binti Norman

  2014cites this paper
• Rethinking FS-ISAC: An IT Security Information Sharing Network Model for the Financial Services Sector

  2014cites this paper
• Un modelo de evaluación de factores críticos de éxito en la implementación de la seguridad en sistemas de información respecto a la intención del usuario

  2014cites this paper
• RETHINKING FS-ISAC : AN IT SECURITY INFORMATION SHARING MODEL FOR THE FINANCIAL SERVICES SECTOR

  2013cites this paper
• Information System Security and Risk Management: Issues and Impact on Organizations

  2013cites this paper
• An Exploration of Group Information Security Compliance: A Social Network Analysis Perspective

  2013cites this paper
• Information security: a stakeholder network perspective

  2013cites this paper
• Evaluating and enriching information and communication technologies compliance frameworks with regard to privacy

  2013cites this paper
• Information Systems Security Management (ISSM) Maturity Factors In E-Commerce Malaysia

  2013cites this paper
• Making Successful Security Decisions: A Qualitative Evaluation

  2012cites this paper
• Information Security Management: A System Dynamics Approach

  2012cites this paper
• Information Security Strategy: In Search of a Role

  2012cites this paper
• Security Risk Management Can Be Investigated! Presenting the Relation Between Research Rigor and an Effective Study

  2012cites this paper
• Analyzing Value Conflicts for a Work-Friendly ISS Policy Implementation

  2012cites this paper
• Institutional Influences on Information Systems Security Innovations

  2012cites this paper
• A Conceptual Analysis about the Organizational Impact of Compliance on Information Security Policy

  2012cites this paper
• Enterprise Information Systems Security: A Case Study in the Banking Sector

  2012cites this paper
• Kollaboratives Threat Modeling für Eingebettete Systeme

  2012cites this paper
• Effective Information Security Requires a Balance of Social and Technology Factors

  2012cites this paper
• Financial Impact of Information Security Breaches on Breached Firms and their Non-Breached Competitors

  2012cites this paper
• An Integrative Model of Information Security Awareness for Assessing Information Systems Security Risk

  2012cites this paper
• Taxonomy of security risk assessment approaches for researchers

  2012cites this paper
• Critical Success Factors for an Effective Security Risk Management Program: An Exploratory Case Study at a Fortune 500 Firm

  2011cites this paper
• Evaluating Information Security Effectiveness with Health Professionals

  2011cites this paper
• Incorporating a knowledge perspective into security risk assessments

  2011cites this paper
• DEMO and Security

  2011cites this paper
• Security Risk Management at a Fortune 500 Firm: A Case Study

  2011cites this paper
• Security subcultures in an organization - exploring value conflicts

  2011cites this paper
• Problem Analysis of Traditional IT-Security Risk Assessment Methods - An Experience Report from the Insurance and Auditing Domain

  2011cites this paper
• Enterprise Information Systems Security: A Conceptual Framework

  2011cites this paper