• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Security and privacy-silver linings in the cloud >Information Security Governance: When Compliance Becomes More Important than Security
【24h】

Information Security Governance: When Compliance Becomes More Important than Security

机译：信息安全治理：当合规性比安全性变得更重要时

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Current security governance is often based on a centralized decision making model and still uses an ineffective 20th century risk management approach to security. This approach is relatively simple to manage since it needs almost no security governance below the top enterprise level where most decisions are made. However, while there is a role for more corporate governance, new regulations, and improved codes of best practice to address current weak organizational security practices, this may not be sufficient in the current dynamic security environment. Organizational information security must adapt to changing conditions by extending security governance to middle management as well as systemetwork administrators. Unfortunately the lack of clear business security objectives and strategies at the business unit level is likely to result in a compliance culture, where those responsible for implementing information security are more interested in complying with organizational standards and policies than improving security itself.
机译：当前的安全治理通常基于集中式决策模型，并且仍然使用无效的20世纪风险管理方法来实现安全性。这种方法相对易于管理，因为在需要做出大多数决策的最高企业级别以下，几乎不需要安全治理。但是，尽管可以发挥更多的公司治理，新法规和改进的最佳实践规范来解决当前薄弱的组织安全实践的作用，但这在当前动态的安全环境中可能还不够。组织信息安全必须通过将安全管理扩展到中层管理人员以及系统/网络管理员来适应不断变化的情况。不幸的是，在业务部门级别上缺乏明确的业务安全目标和策略很可能导致合规文化，在该文化中，负责实施信息安全的人员对遵守组织标准和策略更感兴趣，而不是改善安全性本身。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号