 |
7th Annual IEEE Information Assurance Workshop 21-23 June 2006 "The West Point Workshop" United States Military Academy, West Point, New York |
| Chair: LTC Ronald Dodge, Ronald.Dodge@usma.edu | |
|
|
|
Creating a Balanced Scorecard for Computer SecurityLori DeLoozeThe 7th IEEE Information Assurance Workshop (IAWorkshop 2006)West Point, New York, USA, June 21-23, 2006
AbstractInformation Assurance includes the monitoring and controlling of the various aspects of an organization’s computer security systems. This paper outlines various approaches to define the measures or metrics that can be used to reliably describe the organization’s current IA posture and introduces the use of the Balanced Scorecard for Computer Security. The Balanced Scorecard is most commonly used to monitor and control business elements by looking at them from four important perspectives: customer, financial, internal processes, and innovation and growth. This paper proposes a comparable approach for managing computer security by looking at security mechanisms from the perspectives of the users, owners, regulators, and system administrators.
|
|
