Studying SCADA Organisations Information Security Goals: An Integrated System Theory Approach

Suhaila Ismail; Elena Sitnikova; Jill Slay

Studying SCADA Organisations Information Security Goals: An Integrated System Theory Approach

Suhaila Ismail, Elena Sitnikova, Jill Slay

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Security awareness and its implementation within an organisation is crucial for preventing deliberate attacks or/and minimise system failures on organisation's system especially where critical infrastructure is involved including energy, water, gas and etc. This study is based on Integrated System Theory (IST) and focuses on measuring and assessing security goals including policies, risk management, internal control and contingency management implemented in 101 organisations that operate Supervisory Control and Data Acquisition (SCADA) Systems. The data collected were analysed using structural equation modelling to test the structural and measurement model. The major finding of this study is that organisational information security goals are strongly related to the key measurement indicators, which include items assessing security policies, risk management, internal controls and contingency management.

Original language	English
Title of host publication	PACIS 2015 Proceedings
Publisher	Pacific Asia Conference on Information Systems
Number of pages	14
Publication status	Published - 2015
Externally published	Yes
Event	19th Pacific Asia Conference on Information Systems, PACIS 2015 - Singapore, Singapore Duration: 5 Jul 2015 → 9 Jul 2015

Conference

Conference	19th Pacific Asia Conference on Information Systems, PACIS 2015
Country/Territory	Singapore
City	Singapore
Period	5/07/15 → 9/07/15

Keywords

Information security
Integrated system theory
Risk assessment
SCADA systems
Vulnerability assessment

Access to Document

https://aisel.aisnet.org/pacis2015/77Licence: In Copyright

Cite this

@inproceedings{ea1a98bf7a1a48c1b5b9718bfe0cef4d,

title = "Studying SCADA Organisations Information Security Goals: An Integrated System Theory Approach ",

abstract = "Security awareness and its implementation within an organisation is crucial for preventing deliberate attacks or/and minimise system failures on organisation's system especially where critical infrastructure is involved including energy, water, gas and etc. This study is based on Integrated System Theory (IST) and focuses on measuring and assessing security goals including policies, risk management, internal control and contingency management implemented in 101 organisations that operate Supervisory Control and Data Acquisition (SCADA) Systems. The data collected were analysed using structural equation modelling to test the structural and measurement model. The major finding of this study is that organisational information security goals are strongly related to the key measurement indicators, which include items assessing security policies, risk management, internal controls and contingency management.",

keywords = "Information security, Integrated system theory, Risk assessment, SCADA systems, Vulnerability assessment",

author = "Suhaila Ismail and Elena Sitnikova and Jill Slay",

year = "2015",

language = "English",

booktitle = "PACIS 2015 Proceedings",

publisher = "Pacific Asia Conference on Information Systems",

note = "19th Pacific Asia Conference on Information Systems, PACIS 2015 ; Conference date: 05-07-2015 Through 09-07-2015",

}

TY - GEN

T1 - Studying SCADA Organisations Information Security Goals

T2 - 19th Pacific Asia Conference on Information Systems, PACIS 2015

AU - Ismail, Suhaila

AU - Sitnikova, Elena

AU - Slay, Jill

PY - 2015

Y1 - 2015

N2 - Security awareness and its implementation within an organisation is crucial for preventing deliberate attacks or/and minimise system failures on organisation's system especially where critical infrastructure is involved including energy, water, gas and etc. This study is based on Integrated System Theory (IST) and focuses on measuring and assessing security goals including policies, risk management, internal control and contingency management implemented in 101 organisations that operate Supervisory Control and Data Acquisition (SCADA) Systems. The data collected were analysed using structural equation modelling to test the structural and measurement model. The major finding of this study is that organisational information security goals are strongly related to the key measurement indicators, which include items assessing security policies, risk management, internal controls and contingency management.

AB - Security awareness and its implementation within an organisation is crucial for preventing deliberate attacks or/and minimise system failures on organisation's system especially where critical infrastructure is involved including energy, water, gas and etc. This study is based on Integrated System Theory (IST) and focuses on measuring and assessing security goals including policies, risk management, internal control and contingency management implemented in 101 organisations that operate Supervisory Control and Data Acquisition (SCADA) Systems. The data collected were analysed using structural equation modelling to test the structural and measurement model. The major finding of this study is that organisational information security goals are strongly related to the key measurement indicators, which include items assessing security policies, risk management, internal controls and contingency management.

KW - Information security

KW - Integrated system theory

KW - Risk assessment

KW - SCADA systems

KW - Vulnerability assessment

UR - http://www.scopus.com/inward/record.url?scp=85011097260&partnerID=8YFLogxK

M3 - Conference contribution

AN - SCOPUS:85011097260

BT - PACIS 2015 Proceedings

PB - Pacific Asia Conference on Information Systems

Y2 - 5 July 2015 through 9 July 2015

ER -

Studying SCADA Organisations Information Security Goals: An Integrated System Theory Approach

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this