Earticle

초록

영어

Enormous losses of shareholders and consumers caused by the risks threatening today"s business (e.g., accounting fraud and inside trading) have ignited the necessity of international regulations on corporate ethics and internal control, such as Basel II and SOX. Responding to these regulations, companies are establishing governance system, applying it consistently to the core competency of the company, and increasing the scope of the governance system. Recently occurred security related incidents require companies to take more strict accountability over information security. One of the results includes strengthening of legislation and regulations. For these reasons, introduction of information security governance is needed. Information security governance governs the general information security activities of the company (establishment of information security management system, implementation of information security solutions) in the corporate level. Recognizing that the information security is not restricted to IT domain, but is the issue of overall business, this study develops information security governance framework based on the existing frameworks and systems of IT governance. The information security governance framework proposed in the study include concept, objective, and principle schemes which will help clearly understand the concepts of the information security governance, and execution scheme which will help implement proper organization, process and tools needed for the execution of information security governance.

목차

Abstract
 1. 연구의 배경 및 목적
 2. 이론적 배경
  2.1 거버넌스의 개념과 정의
  2.2 IT 거버넌스 프레임워크
  2.3 정보보호 거버넌스 프레임워크의 필요성
 3. 정보보호 거버넌스 프레임워크의 개발 방법
  3.1 정보보호 거버넌스 프레임워크의 구조요건 정의
  3.2 정보보호 거버넌스의 개념 및 목표 정의요건
  3.3 정보보호 거버넌스의 원칙 요건
  3.4 정보보호 거버넌스 실행체계 요건
 4. 정보보호 거버넌스 프레임워크 항목 개발
  4.1 정보보호 거버넌스의 목표와 개념 정의
  4.2 정보보호 거버넌스의 원칙 항목 정의
  4.3 정보보호 거버넌스 실행체계
 5. 정보보호 거버넌스 프레임워크의 검증
  5.1 검증 방법
  5.2 자료 수집 및 분석 방법
  5.3 검증 결과
  5.4 포커스 그룹 인터뷰 결과 시사점 및 향후 연구
 6. 결론
 참고문헌

키워드

저자

• 이성일 [ Seong il Lee | Ernst&Young Advisory ITRA Manager ]
• 황경태 [ Kyung Tae Hwang | 동국대학교 경영대학 경영정보학과 교수 ] 교신저자

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  JITAM [Journal of Information Technology Applications and Management]

• 간기

  격월간

• pISSN

  1598-6284

• eISSN

  2508-1209

• 수록기간

  1999~2026

• 십진분류

  KDC 005 DDC 005