Document Type
Article
Publication Date
1-1-2017
Originally Published In
International Journal of Business, Humanities and Technology
Volume Number
7
Issue Number
4
Page Numbers
1-4
Downloads before May 2022
95
Abstract
Information security in a current and urgent issue for government and industry with the increasing frequency of cyber security breaches that have occurred in terms of hacking and information theft. To address such issues several approaches have been and continue to be devised to keep abreast with the advances in technology and the skills of those intending harm. To manage the risk inherent in information security several strategies and frameworks are explored. There have been three generations of security risk management strategies as well as governing standards and processes that have been put into place with varying success. Additionally, three security risk management frameworks are analyzed in terms of their effectiveness, policy and legislative relevance and alignment to security and control processes.