12th Americas Conference on Information Systems

Connecting the Americas

Acapulco, México

August 4-6, 2006

Call for Papers for the Mini Track

Information Systems Security

Business Value, Governance and Risk Management

Sponsored by AIS SIGSEC - Special Interest Group in Security: Internet and Network.

Information technology infrastructure and applications play a vital role in value creation and delivery processes in contemporary organizations. Firms rely on their uninterrupted availability to satisfy customer requirements effectively and efficiently. In recent years, however, it has become challenging for firms to ensure the security and availability of their IT systems. The frequency and number of malicious IT attacks have increased dramatically, posing significant threats to organizations. Organizational implications of such incidences can be significant, ranging from the loss of customer goodwill to adverse stock market implications. Despite the importance of IS security, the research in this field is relatively sparse. There is a definite need to examine theories, frameworks, metrics, and models in the context of IS security.  Such work will not only lay the foundation for research in this area but also provide invaluable insights to practitioners.   

 

In recent years, we have witnessed an increased awareness about IS security issues, and a corresponding increase in IS security spending. However, detailed insights about how to conceptualize, categorize and measure different types of IS security risks and the various steps that firms can take to mitigate such risks are lacking in the literature. Further, governance issues such as accountability, incentives and decision rights have not been examined in the prior research. Finally, while IS researchers have always grappled with the measurement of business value issues, understanding about the conceptualization and measurement of business value in the IS Security context, and the processes that lead to value is acutely lacking in the literature. It is hoped that this track will spur research on business value, governance and risk management issues in the context of IS security. Researchers are urged to contribute articles employing both modeling and empirical methodologies.  Rigorous case studies are also welcome. Studies conducted in any type of organization (e.g., business, government, not-for-profit, and military) and in both developed and developing countries are welcome.

We invite papers that address any of the areas listed below, as well as any related issues:

  • Measuring the business value in the IS security context

  • Benefits and payoffs/effectiveness of IS Security

  • Metrics for IS Security

  • Frameworks and evaluation methods for IS security

  • Governance issues in IS security

  • Role and support of top management in IS security

  • Responsibility and Accountability of end users in IS security

  • Monitoring and Compliance of IS security

  • Centralization of IS security in multinational companies

  • Auditing IS security

  • IS security and risk management

  • Frameworks for conceptualizing IS security risks

  • IS security strategy

  • E-commerce security

  • Customer perceptions of information security

 Reviewers, Discussants and Session Chairs are also needed.

Guidelines for Submission

  • Submit abstracts via email to Sarv Devaraj at sdevaraj@nd.edu by February 1, 2006. This is an important step to ensure that you have submitted your paper to the correct mini-track.
  • Final papers will be submitted via the AIS Review System and the deadline is March 1, 2006. See the conference website for details at http://amcis2006.aisnet.org.
  • Copyright Information: Submission of a paper to the conference represents the author's agreement to allow AIS to publish the paper in any written or electronic format for distribution to all interested parties in perpetuity with or without compensation to AIS and without compensation to the author. The parties understand that the author is granting a nonexclusive license and all copyrights remain the property of the author.

Selection of Papers

The primary criterion for selection of a paper will be that it makes a major contribution to knowledge in the topic area. They will go through a rigorous review process that involves inputs from 2-3 reviewers and an Associate Editor.

Mini Track Co-Chairs:

Dr. Sarv Devaraj*

Mendoza College of Business

University of Notre Dame

Notre Dame, IN  46556-5646

Phone: (574) 631-5074

sdevaraj@nd.edu

Dr. Abhay Nath Mishra

Robert H. Smith School of Business
The University of Maryland at College Park
College Park, MD 20742

Phone: (301) 405-9676
amishra@rhsmith.umd.edu

Dr. Ganesh Vaidyanathan
School of Business and Economics

Indiana University South Bend
South Bend, Indiana 46634

Phone: (574) 520-4453
gvaidyan@iusb.edu

* primary contact.