Emerging Information Security Management Issues in the Age of the Internet
Workshop at the
The aim of this workshop is to identify and frame emerging issues in information security management research, in Australia. Companies increasingly adopt internet technologies such as email, intranets, the world wide web, and explore internet-based B2B and B2C relationships. Examples of emerging internet technologies include m-commerce, and recent moves to outsourced, managed security services (e.g. Telstra's recent move in that direction).
Apart from providing certain benefits, internet technologies may also introduce novel security risks. Social issues, such as employee misuse of the internet, are of growing concern. E-mail, for example, can enhance business processes but can also become an information leak if used without care. B2C relationships and the latest product information offered on corporate web sites require employees to be internet-savvy, however once employees are internet-savvy they may also turn to alternative, low quality information sources with poor reputations and ill-advised content, such as "hate web sites". E-mail and chat rooms can be used for marketing, but the same communication channels can be used for distributing false accusations and deliberate misinformation. Managed security services and outsourced IT raise new threats because the outsourcing transfers security responsibilities into the hands of third parties. What are the management issues are raised by these scenarios?
So far, addressing these issues is often carried out ad-hoc, once companies encounter unexpected problems. Strategies and approaches to address these issues, however, need theoretical underpinnings, which this workshop seeks to articulate. In particular, we wish to explore emerging informational and organisational impacts of the internet age, many of which have received surprisingly little research attention, to date.
Topics such as cyber warfare, encryption technologies and malware (viruses, Trojan horses, etc.), are certainly relevant, but considered beyond the workshop's scope-as these topics are covered in other venues (e.g. the Australian Information Warfare and Security Conferences, the Conferences on Information Security and Privacy, the European Anti Malware Conferences, respectively).
Academics and professionals interested in information security management and policy issues and solutions as well as the wider, organisational impacts of global information distribution, such as opinion making, marketing and branding.
Participants are encouraged to provide one-page position papers and/or extended abstracts of their research, to be submitted well ahead of the workshop to the authors, via email. We will then circulate these papers, provided they relate to the workshop topic in some way, before the workshop takes place at ACIS-so that participants will be aware of the interests and expertise of their fellow participants. Participants are welcome without prepared position papers, however greater value is possible from the workshop if position papers are prepared in advance, as suggested.
The organisers will explore wide-ranging publication opportunities (e.g. journal special issues, edited books) for full papers, and will discuss opportunities with participants at the workshop. Suitable papers, for example, could be obtained from extended versions of position papers, or from integrating / expanding workshop results. All accepted workshop papers will be published on a dedicated web site.
Submissions (PDF or postscript preferred) should be sent to
lueg@it.uts.edu.au (Christopher Lueg)
or if necessary to the physical contact address listed below.
Submissions (only PDF or postscript) should be sent to the contact address listed above.
| 24 November 2002 | Papers are due (if possible) |
| 3 December 2002 | The workshop takes place at ACIS 2002 |
