Information Security Governance - Compliance management vs operational management

摘要

This paper discusses the difference that should exist between Information Security Operational Management and Information Security Compliance Management.The paper argues that for good Information Security Governance, good IT Governance and good Corporate Governance, these two dimensions of Information Security Management should be totally separate, and housed in separate departments. (C) 2005 Elsevier Ltd. All rights reserved.