loading...
An Action Research Program to Improve Information Systems Security Compliance across Government Agencies
Big Island, Hawaii January 03-January 06
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/HICSS.2007.5840th Annual Hawaii International Conf ...
 This Article 
 
PURCHASE ARTICLE: $0
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Stephen Smith, University of NSW, Australia
Rodger Jamieson, University of NSW, Australia
Donald Winchester, University of NSW, Australia
Information Systems Security (ISSec) compliance is an important aspect of implementing e-government. This paper presents results from an action research project using longitudinal surveys as interventions to enhance understanding and improve security across the whole of the NSW government, in Australia. The ISO Standard AS/NZS ISO/IEC 17799:2001 Information Technology ? Code of practice for information security management, was used a framework for developing the survey research instrument. The major findings are that this action research program led to an improvement in ISSec compliance by agencies, increased understanding and knowledge as agencies became more aware of ISSec issues, improved agencies ISSec policies and plans, as well as improved business continuity plans. This research is innovative as it is the first time that ISSec has been explored using an action research framework across whole of government.
Citation:
Stephen Smith, Rodger Jamieson, Donald Winchester, "An Action Research Program to Improve Information Systems Security Compliance across Government Agencies," hicss, pp.99c, 40th Annual Hawaii International Conference on System Sciences (HICSS'07), 2007
Usage of this product signifies your acceptance of the Terms of Use.