Evaluation of Failure and Success Factors for Information System Security Management

摘要

An Information System Security Management (ISSM) is the critical issue and aspect of aninformation system as the venerability rate of data and information increases. An evaluation of the failure andsuccess factors for information system security management will help in identifying crucial factors that needcritical attention and consideration in other to build a strong an impenetrable information system that willguarantee the core principles of data communication including confidentiality, integrity and authenticity of datamanaged in such system. The objective of this paper is to explore the reasons for failures in the informationsystem and x-ray the success strategies employed in the systems that has so far proven to be efficient in terms ofinformation system security management. The evaluation of the success and failure factors was carried out withdata collected by means of questionnaires. From the results and findings, amongst the success factor categoriesconsidered,Security management practices, Culture, Environmental influence and Organizational structure, theone with the highest response is the security management practices as detailed in the work. Also failure factorscategorized into Project failure, System failure and User failure were considered and the user related failurefactors was evaluated to be the factors that has the highest rate of influence on ISSM. Conclusively, evaluatingthe success and failure factors in ISSM is essential as it provides a useful indicator of essential securitymanagement practices required in a businesses, organisations and offices.