.png){kind=icon}
.png){kind=icon}
Return
Value conflicts for information security management
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jsis.2011.06.001.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
A business's information is one of its most important assets, making the protection of information a strategic issue. In this paper, we investigate the tension between information security policies and information security practice through longitudinal case studies at two health care facilities. The management of information security is traditionally informed by a control-based compliance model, which assumes that human behavior needs to be controlled and regulated. We propose a different theoretical model: the value-based compliance model, assuming that multiple forms of rationality are employed in organizational actions at one time, causing potential value conflicts. This has strong strategic implications for the management of information security. We believe health care situations can be better managed using the assumptions of a value-based compliance model. (C) 2011 Elsevier B.V. All rights reserved.
Keywords:
Information systems security
Information security
Health care information systems
Values
Value conflicts
Management of information security
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
11.8
Papers:
686
Citations:
4.5K