Accession Number:

ADA621881

Title:

Which Best Practices Are Best For Me? Version 1.0

Descriptive Note:

Briefing charts

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST

Personal Author(s):

Report Date:

2004-01-01

Pagination or Media Count:

36.0

Abstract:

Our objective is to present an alternative way for you and your organization to think about information security best practices and to provide you with an approach for evaluating and selecting best practices in your organization. Summary Organizations should decide for themselves which best practices are best for them using security requirements, risk, practicality, and value as the primary selection criteria. A data driven approach IAP provides a framework for organizations to make informed choices when selecting best practices to implement.

Descriptors:

• *INFORMATION SECURITY
• DECISION MAKING
• INFORMATION SYSTEMS
• ORGANIZATIONS
• REQUIREMENTS
• RISK
• RISK MANAGEMENT
• SECURITY
• VALUE

Subject Categories:

• Information Science

Distribution Statement:

APPROVED FOR PUBLIC RELEASE