Re: Research on Security Critical Success Factors

[Julia Allen <jha () SEI CMU EDU>]

Tim,

You may want to take a look at one of our recently published technical
reports titled "The Critical Success Factor Method: Establishing a
Foundation for Enterprise Security Management." A link to the pdf file can
be found under What's New on the CERT home page, http://www.cert.org.

The report discusses how we have adapted John Rockhart's original work on
CSFs at MIT (and his companion Harvard Business Review article) and applied
it to enterprise security. Hope this helps.

Julia Allen
Carnegie Mellon University
Software Engineering Institute
Home of CERT/CC

--On Tuesday, July 27, 2004 5:06 PM +1000 Tim Lane <tlane () SCU EDU AU> wrote:

> Hello All,
>
> I am researching information security management at Universities and
> wondered if anyone knows of any previous specific research that has
> identified "critical success factors (CSF's) for information security
> management".
>
> I am aware of the CSF's for security specified in COBIT, have found an
> empirical study from sweden that identified critical success factors for
> an information security management system, and am aware of the new CSF
> method published through Carnegie Mellon University.
>
> Despite a lot of other searching I can't find anything else specifically
> on either critical or key success factors.
>
> Is anyone by chance aware of other previous research or white papers that
> exist on this topic?
>
> Thanks very much,
>
> Tim Lane
>
>
> Tim Lane
> Information Security Program Manager
>
> Information Technology and Telecommunication Services
> Southern Cross University
> PO Box 157 Lismore NSW 2480
>
> Ph:  61 2 6620 3290
> Fax: 61 2 6620 3033
> Email: tlane () scu edu au
> http://www.scu.edu.au
> ********** Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.