A Unified Information Security Management Plan

Abstract

Information is quickly becoming the most significant asset of business practice, and it must be protected and secured in order to be useful. Information security, intrusion detection, and privacy were in the top-10-issues list from the American Institute of Certified Public Accountants (AICPA) survey (“Information Security Heads Top 10,” 2003). Furthermore, the potential severity of attacks encourages collaboration between vendors and business clients, including educational institutions, in combating threats (Cox & Kistner, 2003). Essentially, transactions generate data that must be stored for future access in the form of information1. Therefore, data integrity is essential because it directly impacts information quality and any decisions based on that information (Brogan & Krupin, 2003; Ross, Stoneburner, Katzke, Johnson, & Swanson, 2003).