IRIS - Institutional Research Information System
IRIS è il sistema di gestione integrata dei dati della ricerca adottato dalla Luiss Guido Carli. Il Catalogo dei prodotti della ricerca della Luiss raccoglie e rende disponibile, dove possibile nel rispetto del diritto d'autore, la produzione scientifica dei docenti e ricercatori dell'Ateneo. Il Catalogo alimenta inoltre i siti docenti del MIUR.
EnglishInformation systems security is a challenging research area in the context of Information Systems. In fact, it has strong practical implications for the management of IS and, at the same time, it gives very interesting insights into understanding the process of social phenomena when communication information technologies are deployed in organizations. Current standards and best practices for the design and management of information systems security, recommend structured and mechanistic approaches, such as risk management methods and techniques, in order to address security issues. However, risk analysis and risk evaluation processes have their limitations, when security incidents occur, they emerge in a context, and their rarity and even their uniqueness give rise to unpredictable threats. The analysis of these phenomena which are characterized by breakdowns, surprises and side- effects, requires a theoretical approach which is able to examine and interpret subjectively the detail of each incident. The aim of this paper is to highlight the duality of information systems security, providing an alternative view on the management of those aspects already defined in the literature as intractable problems and this is pursued through a formative context (Ciborra, Lanzara, 1994) that supports bricolage, hacking and improvisation .
A Framework for Managing Predictable and Unpredictable Threats: the Duality of Information Security Management / Spagnoletti, Paolo; Resca, A.. - (2007), pp. 1539-1550. ((Intervento presentato al convegno 15th European Conference on Information Systems tenutosi a St. Gallen nel 7-9 June 2007.
| Titolo: | A Framework for Managing Predictable and Unpredictable Threats: the Duality of Information Security Management | |
| Autori: | ||
| Data di pubblicazione: | 2007 | |
| Citazione: | A Framework for Managing Predictable and Unpredictable Threats: the Duality of Information Security Management / Spagnoletti, Paolo; Resca, A.. - (2007), pp. 1539-1550. ((Intervento presentato al convegno 15th European Conference on Information Systems tenutosi a St. Gallen nel 7-9 June 2007. | |
| Handle: | http://hdl.handle.net/11385/5530 | |
| Appare nelle tipologie: | 04.1 - Contributo in Atti di convegno (Paper in Proceedings) |
File in questo prodotto:
| File | Descrizione | Tipologia | Licenza | |
|---|---|---|---|---|
| A Framework for Managing Predictable and Unpredictable Threats_ T.pdf | Versione dell'editore | Tutti i diritti riservati | Administrator |
Pubblicazioni consigliate
http://hdl.handle.net/11385/5530
Copyright © 2022