|
|
12th Connecting the
|
|
Call
for Papers for the Mini Track
Information Systems Security
Business Value, Governance and Risk Management
Sponsored by AIS SIGSEC - Special Interest Group in Security: Internet and Network.
Information technology infrastructure and applications play a vital role in value creation and delivery processes in contemporary organizations. Firms rely on their uninterrupted availability to satisfy customer requirements effectively and efficiently. In recent years, however, it has become challenging for firms to ensure the security and availability of their IT systems. The frequency and number of malicious IT attacks have increased dramatically, posing significant threats to organizations. Organizational implications of such incidences can be significant, ranging from the loss of customer goodwill to adverse stock market implications. Despite the importance of IS security, the research in this field is relatively sparse. There is a definite need to examine theories, frameworks, metrics, and models in the context of IS security. Such work will not only lay the foundation for research in this area but also provide invaluable insights to practitioners.
In recent years, we have witnessed an increased awareness about IS security issues, and a corresponding increase in IS security spending. However, detailed insights about how to conceptualize, categorize and measure different types of IS security risks and the various steps that firms can take to mitigate such risks are lacking in the literature. Further, governance issues such as accountability, incentives and decision rights have not been examined in the prior research. Finally, while IS researchers have always grappled with the measurement of business value issues, understanding about the conceptualization and measurement of business value in the IS Security context, and the processes that lead to value is acutely lacking in the literature. It is hoped that this track will spur research on business value, governance and risk management issues in the context of IS security. Researchers are urged to contribute articles employing both modeling and empirical methodologies. Rigorous case studies are also welcome. Studies conducted in any type of organization (e.g., business, government, not-for-profit, and military) and in both developed and developing countries are welcome.
We invite papers that address any of the areas listed below, as well as any related issues:
Measuring the business value in the IS security context
Benefits and payoffs/effectiveness of IS Security
Metrics for IS Security
Frameworks and evaluation methods for IS security
Governance issues in IS security
Role and support of top management in IS security
Responsibility and Accountability of end users in IS security
Monitoring and Compliance of IS security
Centralization of IS security in multinational companies
Auditing IS security
IS security and risk management
Frameworks for conceptualizing IS security risks
IS security strategy
E-commerce security
Customer perceptions of information security
Reviewers, Discussants and Session Chairs are also needed.
Selection of Papers
The primary criterion for selection of a paper will be that it makes a major contribution to knowledge in the topic area. They will go through a rigorous review process that involves inputs from 2-3 reviewers and an Associate Editor.
|
Dr. Sarv Devaraj* Mendoza College of Business University of Notre Dame Notre Dame, IN 46556-5646 Phone: (574) 631-5074 |
Dr. Abhay Nath Mishra Robert H. Smith School of
Business amishra@rhsmith.umd.edu |
Dr. Ganesh Vaidyanathan
Indiana University South
Bend Phone: (574) 520-4453 |
* primary contact.