Information System Security and Risk Management: Issues and Impact on Organizations

Abstract

Information Technology (IT) based information systems have become the backbone of not only success but of survival of organizations in this highly competitive world. Considering that IT is an important asset it must be managed efficiently to minimize the risks associated with it and the systems it supports. The paper is based on literature review of existing work on information security and risk management. It attempts to describe the theoretical perspective of information system security. It also discusses and analyses the various information security methodologies in practice.