The cost of non-compliance - When policies fail

Elinor M. Madigan; Corey Petrulich; Kelly Motuk

The cost of non-compliance - When policies fail

Elinor M. Madigan, Corey Petrulich, Kelly Motuk

Penn State Schuylkill

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

16 Scopus citations

Abstract

Employees are the greatest threat to an organization's security. Their non-compliance with security policies not only threatens the integrity of the system, it also costs the organization a significant amount of money due to the loss of information or the man-hours spent fixing problems that the user causes. This paper looks at the man-hour cost due to non-compliance at a branch of a large university. We identified what constituted non-compliance and then had the IT staff track the number of hours they spent addressing these problems over a 13-month period. This paper also covers what actions and tools the IT department is using to combat the problem of user non-compliance.

Original language	English (US)
Title of host publication	32nd Annual ACM SIGUCCS Fall 2004 Conference - Proceedings
Pages	47-51
Number of pages	5
State	Published - 2004
Event	32nd Annual ACM SIGUCCS Fall 2004 Conference - Baltimore, MD, United States Duration: Oct 10 2004 → Oct 13 2004

Other

Other	32nd Annual ACM SIGUCCS Fall 2004 Conference
Country/Territory	United States
City	Baltimore, MD
Period	10/10/04 → 10/13/04

All Science Journal Classification (ASJC) codes

General Engineering

Cite this

@inproceedings{57be129509754b98a5a3b56b8c3d1826,

title = "The cost of non-compliance - When policies fail",

abstract = "Employees are the greatest threat to an organization's security. Their non-compliance with security policies not only threatens the integrity of the system, it also costs the organization a significant amount of money due to the loss of information or the man-hours spent fixing problems that the user causes. This paper looks at the man-hour cost due to non-compliance at a branch of a large university. We identified what constituted non-compliance and then had the IT staff track the number of hours they spent addressing these problems over a 13-month period. This paper also covers what actions and tools the IT department is using to combat the problem of user non-compliance.",

author = "Madigan, {Elinor M.} and Corey Petrulich and Kelly Motuk",

year = "2004",

language = "English (US)",

pages = "47--51",

booktitle = "32nd Annual ACM SIGUCCS Fall 2004 Conference - Proceedings",

note = "32nd Annual ACM SIGUCCS Fall 2004 Conference ; Conference date: 10-10-2004 Through 13-10-2004",

}

TY - GEN

T1 - The cost of non-compliance - When policies fail

AU - Madigan, Elinor M.

AU - Petrulich, Corey

AU - Motuk, Kelly

PY - 2004

Y1 - 2004

N2 - Employees are the greatest threat to an organization's security. Their non-compliance with security policies not only threatens the integrity of the system, it also costs the organization a significant amount of money due to the loss of information or the man-hours spent fixing problems that the user causes. This paper looks at the man-hour cost due to non-compliance at a branch of a large university. We identified what constituted non-compliance and then had the IT staff track the number of hours they spent addressing these problems over a 13-month period. This paper also covers what actions and tools the IT department is using to combat the problem of user non-compliance.

AB - Employees are the greatest threat to an organization's security. Their non-compliance with security policies not only threatens the integrity of the system, it also costs the organization a significant amount of money due to the loss of information or the man-hours spent fixing problems that the user causes. This paper looks at the man-hour cost due to non-compliance at a branch of a large university. We identified what constituted non-compliance and then had the IT staff track the number of hours they spent addressing these problems over a 13-month period. This paper also covers what actions and tools the IT department is using to combat the problem of user non-compliance.

UR - http://www.scopus.com/inward/record.url?scp=23944434155&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=23944434155&partnerID=8YFLogxK

M3 - Conference contribution

AN - SCOPUS:23944434155

SP - 47

EP - 51

BT - 32nd Annual ACM SIGUCCS Fall 2004 Conference - Proceedings

T2 - 32nd Annual ACM SIGUCCS Fall 2004 Conference

Y2 - 10 October 2004 through 13 October 2004

ER -

The cost of non-compliance - When policies fail

Abstract

Other

All Science Journal Classification (ASJC) codes

Other files and links

Fingerprint

Cite this