A Design Theory for Secure Information Systems Design Methods
Abstract
Many alternative methods for designing secure information systems (SIS) have been
proposed to ensure system security. However, within all the literature on SIS methods,
there exists little theoretically grounded work that addresses the fundamental
requirements and goals of SIS design. This paper first uses design theory to develop a
SIS design theory framework that defines six requirements for SIS design methods, and
second, shows how known SIS design methods fail to satisfy these requirements. Third,
the paper describes a SIS design method that does address these requirements and
reports two empirical studies that demonstrate the validity of the proposed framework.
Main Authors
Format
Articles
Journal article
Published
2006
Series
Publisher
Association for Information Systems
The permanent address of the publication
https://urn.fi/URN:NBN:fi:jyu-202003202481Käytä tätä linkitykseen.
Review status
Peer reviewed
ISSN
1536-9323
DOI
https://doi.org/10.17705/1jais.00107
Language
English
Published in
Journal of the Association for Information Systems
Citation
- Siponen, M., Baskerville, R., & Heikka, J. (2006). A Design Theory for Secure Information Systems Design Methods. Journal of the Association for Information Systems 7, (11), 725-770. doi:10.17705/1jais.00107
License
Copyright© the Authors & Association for Information Systems, 2006