Ongoing field work centered at the Information Technology Process Institute (ITPI) is finding that change and access controls simultaneously reduce security risk and increase the efficiency and effectiveness of information technology (IT) management and operations. The CERT® Coordination Center is building on this work. This paper describes a system dynamics model that embodies our current hypothesis of why and how these controls reduce the problematic behavior of the low-performing IT operation. We have also started to extend the model in ways that reflect the improved performance seen by high performers. In the longer term, we hope this model will help to understand, specify, and justify a prescriptive process for integrating change and access controls into their business processes in a way that most effectively reduces security risk and increases IT operational effectiveness and efficiency.

This is the whole item.

Date created

• 2006 July 23-2006 July 27

Type

• Document

Processing Activity

• Processing documentation available at: https://wiki.albany.edu/display/SCA/Processing+Ingested+Digital+Files

License

• Creative Commons BY-NC-ND Attribution-NonCommercial-NoDerivs 4.0 International

  
  Contact Us for questions or additional rights.

ITEM CONTEXT

Part of

32937c7b43e3e015509bb71fd40d2054

Scope and Contents

Part of

23d738ba88f8333bc39725f9cb5bd0b8

Scope and Contents

Part of

f9377a3ac7b50b1fca5e04fb6d679ec2

Scope and Contents

Collection

System Dynamic Society Records

Scope and Contents

Collecting area

• This collection is part of the University Archives