Choice and Chance: A Conceptual Model of Paths to Information Security Compromise.

Author List: Ransbotham, Sam; Mitra, Sabyasachi;
Information Systems Research, 2009, Volume 20, Issue 1, Page 121-139.
No longer the exclusive domain of technology experts, information security is now a management issue. Through a grounded approach using interviews, observations, and secondary data, we advance a model of the information security compromise process from the perspective of the attacked organization. We distinguish between deliberate and opportunistic paths of compromise through the Internet, labeled choice and chance, and include the role of countermeasures, the Internet presence of the firm, and the attractiveness of the firm for information security compromise. Further, using one year of alert data from intrusion detection devices, we find empirical support for the key contributions of the model. We discuss the implications of the model for the emerging research stream on information security in the information systems literature.
Keywords: computer crime; information security management; information systems risk management
Algorithm:

List of Topics

#73 0.281 security threat information users detection coping configuration avoidance response firm malicious attack intrusion appraisal countermeasures benefit costs threats ability rate
#240 0.151 systems information management development presented function article discussed model personnel general organization described presents finally computer-based role examined functional components
#222 0.136 research researchers framework future information systems important present agenda identify areas provide understanding contributions using literature studies paper potential review
#228 0.116 internet peer used access web influence traditional fraud world ecology services impact cases wide home studies addition choice 2008 telephone
#191 0.107 model models process analysis paper management support used environment decision provides based develop use using help literature mathematical presented formulation
#193 0.078 time use size second appears form larger benefits combined studies reasons selected underlying appear various significantly result include make attention