[Full-disclosure] InfoSec Paper: Creating Business Through Virtual Trust

Information Security Community,

Please consider our paper - "Creating Business Through Virtual Trust: How to Gain and Sustain a Competitive Advantage Using Information Security" - for your review.

Here is the abstract from our paper:

"Cash. Profit. Margins. Productivity. This is the language of business. At this time, it is not the language of information security. Business is concerned with the creation of new entities and assets that generate cash. Information security, by contrast, is traditionally concerned with protecting these entities and assets. In this paper we examine a perspective which currently exists but is largely dormant in the information security field. We maintain that information security can be actively involved in the creation of business and that the skills required to create commercial activity must be added to the information security professional’s intellectual tool set. We also present evidence to demonstrate that the capability of security to create business, which we designate by the term “virtual trust”, may become a dominant paradigm for how to think about information security."

The paper may be downloaded here:
http://www.ftusecurity.com/pub/VT-belva-dekay-final.pdf

We have set up a website for your feedback. Please register if you are interested in participating in the dialogue. The site is:
http://bbs.ftusecurity.com

Thanks for your interest. We look forward to a productive discussion.

Sincerely,
Kenneth F. Belva & Sam H. Dekay

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Re: Basic Windows Security Question
    ... considering normal business use of email I would say not. ... >There are very few reasons to use external media on a connected network ... >>they need to install programs themselves, or even do simple things like ... >Earn your MS in Information Security ONLINE ...
    (Security-Basics)
  • RE: Information Security in Mergers and Acquisition
    ... this isn't information security / assurance, I think that it fits very ... organization assume the risk of the other without changes to the policy ... Is the policy integrated into the business ... I believe you'll need to do a business risk assessment ...
    (Security-Basics)
  • InfoSec Paper: Creating Business Through Virtual Trust
    ... Please consider our paper - "Creating Business Through Virtual Trust: How to Gain and Sustain a Competitive Advantage Using Information ... it is not the language of information security. ... Information security, by contrast, is traditionally concerned with protecting these entities and assets. ... We maintain that information security can be actively involved in the creation of business and that the skills required to create commercial activity must be added to the information security professional’s intellectual tool set. ...
    (Bugtraq)
  • IT RISK Solutions
    ... I was really wondering what the activity of "Business & IT Risk ... Earn your MS in Information Security ONLINE ...
    (Security-Basics)