Many of these soldiers, like their counterparts in the reserve components of other military services, perform information security functions in their civilian careers, often in high-tech sectors.
Using a unique data set, this study examines how the quality of the relationship between the internal audit and the information security functions affects objective measures of the overall effectiveness of an organization's information security efforts.
In addition, we find that higher levels of management support for information security and having the chief information security officer (CISO) report independently of the IT function have a positive effect on the quality of the relationship between the internal audit and information security functions.
We develop an exploratory model of the factors that influence the nature of the relationship between the internal audit and information security functions, describe the potential benefits organizations can derive from that relationship, and present propositions to guide future research.
The internal audit and information security functions should work together synergistically: the information security staff designs, implements, and operates various procedures and technologies to protect the organization's information resources, and internal audit provides periodic feedback concerning effectiveness of those activities along with suggestions for improvement.
This paper presents the first stage of a research program designed to investigate the nature of the relationship between the information security and internal audit functions.
Within the information technology department, Tocco has taken a similar approach to compiling a "service quality index" that lets him see at a glance how well his people are doing at managing functions like information security.
A key function in any information security infrastructure is represented by access control which concerns the ways according to which users can access resources in a computer systems.
Hash functions play important role in the information security era.
The previous researches lack the security function for the health information shared since it provides only accident management service.
