An Emerging Information Security Minimum Standard of Due Care

TL;DRAbstract

This article examines the emerging body of law surrounding an enterprise‘s responsibility for securing information, together with the emerging body of information security management principles and practices for doing so. Seven key information security management elements are identified which we believe constitute an information security minimum standard of due care. Enterprises failing to implement these seven management elements could face significant legal exposure should they suffer a security breach resulting in damage to a 3 rd -party. 1 This is a revised version of an article that first appeared in Information Security Management Handbook, Fifth Edition, Volume 2, edited by Hal Tipton and Micki Krause, Auerbach, 2005. Introduction The microcomputer revolution, and with it the rise of local area networks, wide area networks and the Internet, is more than 20 years old. Interconnecting computers and networks has brought great gains in productivity and opened up exciting new realms

Chat with Paper

AI Agents for this Paper