國立虎尾科技大學 |

A phenomenological study of information security incidents experienced by information security professionals providing corporate information security incident management.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	A phenomenological study of information security incidents experienced by information security professionals providing corporate information security incident management./
Author:	Burkhead, Randy L.
Description:	1 online resource (159 pages)
Notes:	Source: Dissertations Abstracts International, Volume: 76-08, Section: B.
Contained By:	Dissertations Abstracts International76-08B.
Subject:	Information technology. -
Online resource:	click for full text (PQDT)
ISBN:	9781321556353

A phenomenological study of information security incidents experienced by information security professionals providing corporate information security incident management.
Burkhead, Randy L.

A phenomenological study of information security incidents experienced by information security professionals providing corporate information security incident management. - 1 online resource (159 pages)

Source: Dissertations Abstracts International, Volume: 76-08, Section: B.

Thesis (Ph.D.)--Capella University, 2014.

Includes bibliographical references

The security of digital information is paramount to the success of private organizations. Violating that security is a multi-billion-dollar criminal business and exploiting these vulnerabilities creates a single point of failure for operations. Thus, understanding the detection, identification, and response to information security incidents is critical to protecting all levels of infrastructure. The lived experiences of current professionals indicate 10 unique themes in regards to how information security incidents are addressed in private organizations. These unique themes led the researcher to offer several conclusions related to the importance of planning, communication, offensive capabilities, and integration with third-party organizations. Information security incident management is accomplished as an escalation process with multiple decision points leading to a restoration of services or security. The source of the incident is not often sought beyond the first external IP address but their purpose and intent are essential to information security incident management. The key lessons learned from professionals include the importance of having a plan, training the plan, and incorporating the human elements of security into information security incident response. Penetration testing as well a knowledge about threat and attack patterns are important to information security incident management for detection, containment, and remediation. External organizations play a major role in the management of information security incidents as fear, incompetence, and jurisdictional issues keep the private sector from working with government, military, and law enforcement organizations. These themes have wide reaching implications for practical application and future research projects.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9781321556353Subjects--Topical Terms:

559429
Information technology.
Subjects--Index Terms:

Incident managementIndex Terms--Genre/Form:

554714
Electronic books.

A phenomenological study of information security incidents experienced by information security professionals providing corporate information security incident management.
LDR:03294ntm a22003857 4500 001 1151108
005 20241104055715.5
006 m o d
007 cr bn ---uuuuu
008 250605s2014 xx obm 000 0 eng d
020 $a 9781321556353
035 $a (MiAaPQ)AAI3682325
035 $a (MiAaPQ)capella:16556
035 $a AAI3682325
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Burkhead, Randy L. $3 1477806
245 1 2 $a A phenomenological study of information security incidents experienced by information security professionals providing corporate information security incident management.
264 0 $c 2014
300 $a 1 online resource (159 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 76-08, Section: B.
500 $a Publisher info.: Dissertation/Thesis.
500 $a Advisor: Sharum, Bernard J.
502 $a Thesis (Ph.D.)--Capella University, 2014.
504 $a Includes bibliographical references
520 $a The security of digital information is paramount to the success of private organizations. Violating that security is a multi-billion-dollar criminal business and exploiting these vulnerabilities creates a single point of failure for operations. Thus, understanding the detection, identification, and response to information security incidents is critical to protecting all levels of infrastructure. The lived experiences of current professionals indicate 10 unique themes in regards to how information security incidents are addressed in private organizations. These unique themes led the researcher to offer several conclusions related to the importance of planning, communication, offensive capabilities, and integration with third-party organizations. Information security incident management is accomplished as an escalation process with multiple decision points leading to a restoration of services or security. The source of the incident is not often sought beyond the first external IP address but their purpose and intent are essential to information security incident management. The key lessons learned from professionals include the importance of having a plan, training the plan, and incorporating the human elements of security into information security incident response. Penetration testing as well a knowledge about threat and attack patterns are important to information security incident management for detection, containment, and remediation. External organizations play a major role in the management of information security incidents as fear, incompetence, and jurisdictional issues keep the private sector from working with government, military, and law enforcement organizations. These themes have wide reaching implications for practical application and future research projects.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Information technology. $3 559429
653 $a Incident management
653 $a Information security
653 $a Information technology
653 $a Phenomenology
655 7 $a Electronic books. $2 local $3 554714
690 $a 0489
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a Capella University. $b School of Business and Technology. $3 1148483
773 0 $t Dissertations Abstracts International $g 76-08B.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=3682325 $z click for full text (PQDT)