Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)

Strategic information systems planning and strategic information security are two different atributes in information systems world. Information systems security must be integrated with business plan (Wylder, 2003) and strategic information systems planning must be align with business plan. This stud...

Full description

Bibliographic Details
Main Authors: Selamat, Md. Hafiz, Suhaimi, Mohd. Adam, Hussin, Husnayati
Format: Conference or Workshop Item
Language:English
Published: 2006
Subjects:
Online Access:http://eprints.utm.my/3387/
http://eprints.utm.my/3387/1/NICT%2706_-_SISP-SSP_Ver_1.3.pdf
_version_ 1848890561240498176
author Selamat, Md. Hafiz
Suhaimi, Mohd. Adam
Hussin, Husnayati
author_facet Selamat, Md. Hafiz
Suhaimi, Mohd. Adam
Hussin, Husnayati
author_sort Selamat, Md. Hafiz
building UTeM Institutional Repository
collection Online Access
description Strategic information systems planning and strategic information security are two different atributes in information systems world. Information systems security must be integrated with business plan (Wylder, 2003) and strategic information systems planning must be align with business plan. This study aims to investigate the contribution of information security attributes to the strategic information systems planning in the organization. Strategic information system planning (SISP) is an exercise or ongoing activities that enable organization to develop priorities for information system (IS) development (Doherty, 1999). SISP approach is a combination of method, process and implementation (Earl, 1993). As a new business strategies and information technologies are both rapidly moving targets, it is a very challenging task to produce an effective plan that achieves business objectives with efficient information systems support (Hevner et al. 2000). Organization invest very large amount of time and money in the SISP project. In a typical SISP project, term of key managers, users, selected clients, and IS specialist are formed (Hevner et al. 2000) and planning methodology is chosen. On the other hand, Information security planning is to mitigate risk associated with the processing of information with confidentially, integrity and authenticity (Wylder, 2003). Finally, this study will introduce a new model of SISP embedded with information security attributes based on previous literature on both SISP and strategic information security.
first_indexed 2025-11-15T20:44:02Z
format Conference or Workshop Item
id utm-3387
institution Universiti Teknologi Malaysia
institution_category Local University
language English
last_indexed 2025-11-15T20:44:02Z
publishDate 2006
recordtype eprints
repository_type Digital Repository
spelling utm-33872017-08-24T03:56:32Z http://eprints.utm.my/3387/ Integrating Strategic Information Security with Strategic Information Systems Planning (SISP) Selamat, Md. Hafiz Suhaimi, Mohd. Adam Hussin, Husnayati H Social Sciences (General) QA75 Electronic computers. Computer science Strategic information systems planning and strategic information security are two different atributes in information systems world. Information systems security must be integrated with business plan (Wylder, 2003) and strategic information systems planning must be align with business plan. This study aims to investigate the contribution of information security attributes to the strategic information systems planning in the organization. Strategic information system planning (SISP) is an exercise or ongoing activities that enable organization to develop priorities for information system (IS) development (Doherty, 1999). SISP approach is a combination of method, process and implementation (Earl, 1993). As a new business strategies and information technologies are both rapidly moving targets, it is a very challenging task to produce an effective plan that achieves business objectives with efficient information systems support (Hevner et al. 2000). Organization invest very large amount of time and money in the SISP project. In a typical SISP project, term of key managers, users, selected clients, and IS specialist are formed (Hevner et al. 2000) and planning methodology is chosen. On the other hand, Information security planning is to mitigate risk associated with the processing of information with confidentially, integrity and authenticity (Wylder, 2003). Finally, this study will introduce a new model of SISP embedded with information security attributes based on previous literature on both SISP and strategic information security. 2006-01-17 Conference or Workshop Item NonPeerReviewed other en http://eprints.utm.my/3387/1/NICT%2706_-_SISP-SSP_Ver_1.3.pdf Selamat, Md. Hafiz and Suhaimi, Mohd. Adam and Hussin, Husnayati (2006) Integrating Strategic Information Security with Strategic Information Systems Planning (SISP). In: National ICT Conference 06, 17 January 2006, Putra Palace Hotel, Kangar, Perlis.
spellingShingle H Social Sciences (General)
QA75 Electronic computers. Computer science
Selamat, Md. Hafiz
Suhaimi, Mohd. Adam
Hussin, Husnayati
Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)
title Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)
title_full Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)
title_fullStr Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)
title_full_unstemmed Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)
title_short Integrating Strategic Information Security with Strategic Information Systems Planning (SISP)
title_sort integrating strategic information security with strategic information systems planning (sisp)
topic H Social Sciences (General)
QA75 Electronic computers. Computer science
url http://eprints.utm.my/3387/
http://eprints.utm.my/3387/1/NICT%2706_-_SISP-SSP_Ver_1.3.pdf