Security Management White Papers
Fundamental Practices for Security of Information Assets in the Small to Medium Sized Organization
Overview The purpose of the study presented in this paper is to provide a set of 'Fundamental practices' for protecting the networked information assets of small to medium sized organizations. Fundamental practices are defined as those practices that are identified on a recurring basis in the literature as necessary or very important for the security of networked information assets. Networked information assets are defined by ITTS at Stanford University (Stanford 2003) as academic and intellectual capital, proprietary business management and financial data, personally identifiable health information, and personally identifiable customer or consumer data. These recommended practices address the three basic information security concepts of confidentiality, integrity, and availability as identified by the Software Engineering Institute.
| Publisher | University of Oregon | File Format | |
|---|---|---|---|
| Date Published | March 2004 | Downloads | 2 |
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSS
Download
Register
