INTEGRATED SECURITY FRAMEWORK FOR INDUSTRIAL R&D ENVIRONMENTS
Sangkyun Kim · International Journal of Software Engineering and Knowledge Engineering · 2010
As use of information systems in R&D environments has increased enormously, the risks of technology leakage through information systems have become more serious. To provide a basic guideline of R&D security which helps enterprise executives to solve the managerial problems of R&D security planning is a purpose of this paper. This paper provides an integrated security framework including R&D security goal, R&D-related division and activity, and pool of controls. With the integrated security framework suggested in this paper, an enterprise that invests hundreds of thousands of dollars to develop a new product can adapt itself to mitigate security risks and reduce potential losses of technology leakage. It could be believed to be the first attempt to provide the R&D-specific security framework for enterprise executives to solve the security problems in R&D environments.