Information Security Management Policies and Processes: A Total Security Model

摘要

The recent outbreaks of data breaches created the needs for better management and control of information security in businesses. Despite continuous efforts in management and control of information, the recent losses of information at major businesses and government agencies show that protection of information is critical. This study investigates the challenges that business enterprises faced in information security and proposes a total security management model. Incidents of recent major data breaches are examined. This study finds while technology plays the center role in information security, the weakest area in information security is management. The paper ends with lessons learned.