Principles for Managing Information Security in the New Millennium

Abstract

This chapter sketches out three classes of principles. Following a brief description of the class, each principle is elaborated and suggestions made thereof as to its applicability. The three classes of principles are: Principles for managing the pragmatic aspects of an organization; Principles for managing the formal rule-based aspects of an organization; Principles for managing the technical systems