出版社：International Association for Computer Information Systems
摘要：Information security has taken on increasing importance as the size and complexity of IT issues continues to grow. Research literature in information security suggests that clarity in policies, systems auditing and clear deterrence practices enhance organizational information security effectiveness. In this paper we analyze research framework defining how the three constructs: security policies, deterrence practices and systems auditing impact information security effectiveness. A survey was conducted to collect data, the results of which suggest that there is a significant relationship between security policies and systems audit with security effectiveness.
关键词：Information security; systems audit; deterrence; policy; regression; survey
