首页> 外文会议>2012 IEEE Colloquium on Humanities, Science and Engineering Research >Information assets security requirement: The relationship between confidentiality and availability of information assets in ICT outsourcing
【24h】

Information assets security requirement: The relationship between confidentiality and availability of information assets in ICT outsourcing

机译:信息资产安全要求:ICT外包中信息资产的机密性与可用性之间的关系

获取原文
获取原文并翻译 | 示例

摘要

Information Communication Technology (ICT) Outsourcing provides an effective ways to cut cost and improve efficiency in ICT services. However, the strategy could invite some risks including information security risk. Therefore, fundamental concepts of information security requirements such as confidentiality, integrity and availability for information assets involved in ICT outsourcing cycle need to be identified extensively to ensure these information assets are secure from security risks. Hence, the main objective of this research is to conduct an empirical study on relationship between information assets confidentiality and availability in ICT outsourcing. Questionnaires were distributed to 300 private companies from various industry and government agencies in Malaysia for the study. Findings reveal that the higher the confidentiality level, the higher the availability level of the information assets. However, the findings revealed dissimilar relationship strength between confidentiality and availability of information assets in ICT outsourcing phases. Strong positive relationship exists between confidentiality and availability in Selection of Service Provider and On-going Monitoring phase. But, moderate positive relationship exists in Analysis of Decision to Outsource and Contract Management phases. Based from these findings, organization could improve their plan and practices in managing information assets and to urgently address information security risks in ICT outsourcing project implementation.
机译:信息通信技术(ICT)外包提供了一种有效的方式来降低成本并提高ICT服务的效率。但是,该策略可能会带来一些风险,包括信息安全风险。因此,需要广泛确定信息安全要求的基本概念,例如涉及ICT外包周期的信息资产的机密性,完整性和可用性,以确保这些信息资产不受安全风险的影响。因此,本研究的主要目标是对信息资产保密性与ICT外包中的可用性之间的关系进行实证研究。调查问卷被分发给马来西亚各行业和政府机构的300家私营公司进行研究。结果表明,机密性级别越高,信息资产的可用性级别越高。但是,调查结果表明,在信息通信技术外包阶段,机密性与信息资产的可用性之间的关系强度不尽相同。在选择服务提供商和持续监控阶段,机密性和可用性之间存在很强的积极关系。但是,在外包决策分析和合同管理阶段中存在适度的积极关系。基于这些发现,组织可以改善其在管理信息资产方面的计划和实践,并在ICT外包项目实施过程中紧急解决信息安全风险。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号