A management view of internet electronic commerce security

✍ Scribed by Charles Cresson Wood

• Publisher: Elsevier Science
• Year: 1997
• Tongue: English
• Weight: 586 KB
• Volume: 16
• Category: Article
• ISSN: 0167-4048
• DOI: 10.1016/s0167-4048(97)80195-2

✦ Synopsis

The Role of Risk Assessment

Although some have attempted it, one cannot simply read a brochure, go and buy an Internet electronic commerce product, and thereby achieve an adequate level of security. Although it's now possible to achieve adequate security with a variety of commercial off-the-shelf products, merchant organizations in most instances must provide considerable systems integration effort. A number of vendors are making this integration process easier when they provide suites of products cobbled together from various vendors.

For each merchant there are many risk factors to consider, and many relationships between these factors. It would be attractive if there were a one-size-fits-all approach, but in reality each merchant needs to perform its own risk assessment. This risk assessment should identify the unique risks related to the proposed Internet business activity, suitable controls that address these risks, and the inter-relationships between these controls. For example, if one control fails, will there be another one to prevent serious harm to the organization? This new and complex environment 0 Baseline Software, Inc.