Effective IS Security: An Empirical Study.

Author List: Straub Jr., Detmar W.;
Information Systems Research, 1990, Volume 1, Issue 3, Page 255-276.
Information security has not been a high priority for most managers. Many permit their installations to be either lightly protected or wholly unprotected, apparently willing to risk major losses from computer abuse. This study, based on the criminological theory of general deterrence, investigates whether a management decision to invest in IS security results in more effective control of computer abuse. Data gathered through a survey of 1,211 randomly selected organizations indicates that security countermeasures that include deterrent administrative procedures and preventive security software will result in significantly lower computer abuse. Knowledge about these relationships is useful for making key decisions about the security function.
Keywords: computer security;information security;general deterrence theory;computer crime;computer ethics;protection of the information resource
Algorithm:

List of Topics

#186 0.284 security information compliance policy organizations breach disclosure policies deterrence breaches incidents results study abuse managed isp violations based comply protection
#193 0.140 time use size second appears form larger benefits combined studies reasons selected underlying appear various significantly result include make attention
#276 0.124 satisfaction information systems study characteristics data results using user related field survey empirical quality hypotheses important success various indicate tested
#264 0.097 risk risks management associated managing financial appropriate losses expected future literature reduce loss approach alternative mitigate failures failure cause mitigation
#8 0.077 decision making decisions decision-making makers use quality improve performance managers process better results time managerial task significantly help indicate maker
#150 0.071 issues management systems information key managers executives senior corporate important importance survey critical corporations multinational managing interviews study results concerns