Systemic Security Management
Laree S. Kiely, Terry Benzel · IEEE Security & Privacy · 2006
The University of Southern California's Institute for Critical Information Infrastructure Protection (ICIIP) developed a conceptual framework for enterprise security. ICIIP (which shouldn't be confused with the Institute for Information Infrastructure Protection, or I3P) sought to close the gap between the current corporate cybersecurity risk profile and what's needed to protect the US's critical infrastructure information. The ICIIP framework analyzes organizational systems (not computer systems, but rather coordinated organizational bodies), incorporates multiple disciplines, and makes recommendations about those systems' structure and relationships