NDLI: Information Security Risk Management: An Empirical Study on the Difficulties and Practices in ICT Outsourcing

Content Provider	IEEE Xplore Digital Library
Author	Khidzir, N.Z. Mohamed, A. Arshad, N.H.H.
Copyright Year	2010
Abstract	Information Communication Technology (ICT) services become more importance in today business environment. Most of the organizations which were not have enough resources and expertise outsource their ICT project to vendors. Conversely, the strategy could also contribute to some risks especially information security risks that could expose organizational information assets directly involved with ICT services at risks. An appropriate information security risk management (ISRM) in ICT outsourcing should be in place to facilitate efficiency of practices how to manage information security risks in ICT outsourcing. The objective of this research is to conduct an empirical study on the relationship between difficulties and practices of ISRM in ICT Outsourcing. Questionnaires were distributed to 300 private companies from various industry and government agencies in Malaysia for the study. Findings of the study show that difficulty of ISRM process influences its practices in ICT outsourcing. Through the findings, influence strength between difficulties and practices of information security risk management approach in ICT outsourcing project has been discovered. Risk treatment planning task was considered as the most difficult and risk control task was considered the least difficult in ISRM cycle. However most of the organization plans their risk treatment task since an appropriate plan could ensure more effective information security risk management implementation. In conclusion, difficulties of organization current (ISRM) practices for ICT Outsourcing shows that their current practices required for review and improvement appropriately for ICT outsourcing implementation. Hence, it’s would encourage development of more comprehensible and effective approach managing information security risk for ICT outsourcing project.
Starting Page	234
Ending Page	239
File Size	404021
Page Count	6
File Format	PDF
ISBN	9781424480487
DOI	10.1109/NETAPPS.2010.49
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-09-22
Publisher Place	Malaysia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Information security Process control Organizations Outsourcing Risk management Monitoring
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Information security risk management: An empirical study on the importance and practices in ICT outsourcing

An ICT security management framework

Risk management practices in IT outsourcing projects

Research on security management system PRS-ISMCS of information system

Research on security management and control system of information system in IT governance

Research on Software Development Process Assurance Models in ICT Supply Chain Risk Management

An Empirical Study into Information Security Governance Focus Areas and their Effects on Risk Management

Research on risk management and control system for information security K-PRS-ISMCS based on knowledge management

Optimizing Security Efficiency through Effective Risk Management

Information Security Risk Management: An Empirical Study on the Difficulties and Practices in ICT Outsourcing

Similar Documents

Information security risk management: An empirical study on the importance and practices in ICT outsourcing

An ICT security management framework

Risk management practices in IT outsourcing projects

Research on security management system PRS-ISMCS of information system

Research on security management and control system of information system in IT governance

Research on Software Development Process Assurance Models in ICT Supply Chain Risk Management

An Empirical Study into Information Security Governance Focus Areas and their Effects on Risk Management

Research on risk management and control system for information security K-PRS-ISMCS based on knowledge management

Optimizing Security Efficiency through Effective Risk Management

Information Security Risk Management: An Empirical Study on the Difficulties and Practices in ICT Outsourcing