Incorporating a knowledge perspective into security risk assessments

Abstract

Purpose: Many methodologies exist to assess the security risks associated with unauthorized leakage, modification and interruption of information used by organisations. This paper argues that these methodologies have a traditional orientation towards the identification and assessment of technical information assets. This obscures key risks associated with the cultivation and deployment of organisational knowledge. The purpose of this paper is to explore how security risk assessment methods can more effectively identify and treat the knowledge associated with business processes. Design/methodology/approach: The argument was developed through an illustrative case study in which a well-document..