A preliminary study to determine the role of organizational knowledge in computer security
Paper
Paper/Presentation Title | A preliminary study to determine the role of organizational knowledge in computer security |
---|---|
Presentation Type | Paper |
Authors | Gururajan, Raj (Author) and Thompson, Alan (Author) |
Editors | Elliott, Steve, Williams, Mary-Anne, Williams, Sue and Pollard, Carol |
Journal or Proceedings Title | Proceedings of the 15th Australasian Conference on Information Systems (ACIS 2004) |
Number of Pages | 10 |
Year | 2004 |
Place of Publication | Hobart, Australia |
ISBN | 1864876948 |
Web Address (URL) of Paper | http://aisel.aisnet.org/cgi/viewcontent.cgi?article=1126&context=acis2004 |
Conference/Event | 15th Australasian Conference on Information Systems (ACIS 2004) |
Event Details | 15th Australasian Conference on Information Systems (ACIS 2004) Parent Australasian Conference on Information Systems (ACIS) Delivery In person Event Date 01 to end of 03 Dec 2004 Event Location Hobart, Australia |
Abstract | Prior studies indicate that the application of organisational knowledge in computer security has potential benefits. Despite this, it appears that many organisations engage external consultants to develop their computer security policies. It appears that prior studies while supporting the concept of external security consultants to some extent in organisations, also question the effectiveness of such external expertise in terms of performance in computer security. This study examined the role of organisational knowledge in the management of computer security in organisations. A conceptual model based on Rivard et al (1997) was developed with seven constructs. An instrument with 30 questions was prepared and 19 organisations with security procedures were surveyed. The results indicate that there is a negative correlation between external knowledge and the use of policies and procedures, indicating that these policies are not well integrated with the requirements of organisations. Further, the outcome of the study also indicates that organisations are satisfied with the use explicit knowledge available in organisations for the development of computer security policies. In essence, this study concluded that currently the organisational knowledge has a limited role in computer security. |
Keywords | computer security; knowledge management; standards |
ANZSRC Field of Research 2020 | 350302. Business information management (incl. records, knowledge and intelligence) |
460499. Cybersecurity and privacy not elsewhere classified | |
460905. Information systems development methodologies and practice | |
Public Notes | Paper no. 7 |
Byline Affiliations | Department of Information Systems |
Murdoch University | |
Institution of Origin | University of Southern Queensland |
https://research.usq.edu.au/item/q04y2/a-preliminary-study-to-determine-the-role-of-organizational-knowledge-in-computer-security
569
total views6
total downloads3
views this month0
downloads this month