A Model of Information Assurance Benefits
Jean‐Noël Ezingeard, Elspeth McFadzean, David W. Birchall · EDPACS · 2005
Security concerns are on the increase in all organizations worldwide and there is a growing number of calls urging senior managers and top executives to take greater interest in information security (Fourie, 2003). These calls are mainly based on the premise that the engagement of senior managers and directors with the information security responsibility is key to achieving good security (ISO, 2000; Thomson and von Solms, 2003). But are these calls being heard? Unfortunately, there is evidence that the issue is not reaching the top layers of organizations, or that it only does so at irregular intervals and on an adhoc basis (Ezingeard et al., 2004b), with the attention of senior managers for information security centered around incidents, either published in the press or internally identified.