Jove
Visualize
Contact Us
JoVE
x logofacebook logolinkedin logoyoutube logo
ABOUT JoVE
OverviewLeadershipBlogJoVE Help Center
AUTHORS
Publishing ProcessEditorial BoardScope & PoliciesPeer ReviewFAQSubmit
LIBRARIANS
TestimonialsSubscriptionsAccessResourcesLibrary Advisory BoardFAQ
RESEARCH
JoVE JournalMethods CollectionsJoVE Encyclopedia of ExperimentsArchive
EDUCATION
JoVE CoreJoVE BusinessJoVE Science EducationJoVE Lab ManualFaculty Resource CenterFaculty Site
Terms & Conditions of Use
Privacy Policy
Policies

Related Experiment Videos

The myth of secure computing.

Robert D Austin1, Christopher A Darby

  • 1Harvard Business School, Boston, Massachusetts, USA.

Harvard Business Review
|June 13, 2003
PubMed
Summary
This summary is machine-generated.

Senior executives must manage computer security risks proactively by assessing information assets and vulnerabilities. This operational approach, not purely technical, aims to reduce business risk to acceptable levels.

Related Concept Videos

You might also read

Related Articles

Articles linked to this work by shared authors, journal, and citation graph.

Sort by
Same author

Editorial: Boredom: the elephant in the room.

Frontiers in sociology·2024
Same author

Retraction for Carter et al., "Elicitation of Protective Antibodies against a Broad Panel of H1N1 Viruses in Ferrets Preimmune to Historical H1N1 Influenza Viruses".

Journal of virology·2024
Same author

Correction for Carter et al., "Design and Characterization of a Computationally Optimized Broadly Reactive Hemagglutinin Vaccine for H1N1 Influenza Viruses".

Journal of virology·2024
Same author

Elicitation of Protective Antibodies against a Broad Panel of H1N1 Viruses in Ferrets Preimmune to Historical H1N1 Influenza Viruses.

Journal of virology·2017
Same author

Design and Characterization of a Computationally Optimized Broadly Reactive Hemagglutinin Vaccine for H1N1 Influenza Viruses.

Journal of virology·2016
Same journal

The Case for Capitation.

Harvard business review·2016
Same journal

How to Pay for Health Care.

Harvard business review·2016
Same journal

How to Preempt Team Conflict.

Harvard business review·2016
Same journal

The Secrets of Great Teamwork.

Harvard business review·2016
Same journal

Leading the Team You Inherit.

Harvard business review·2016
Same journal

Wicked Problem Solvers.

Harvard business review·2016
See all related articles

Area of Science:

  • Business Management
  • Information Security
  • Risk Management

Background:

  • Senior executives often delegate computer security to technical staff or consultants, creating an arms-length approach.
  • Security breaches impact 90% of businesses annually, costing an estimated $17 billion.
  • An inadequate approach to computer security poses significant financial and operational risks to businesses.

Purpose of the Study:

  • To guide senior executives in adopting a hands-on approach to computer security.
  • To reframe computer security as an operational risk management challenge rather than a purely technical one.
  • To provide actionable strategies for mitigating digital security threats.

Main Methods:

  • Assessing the business value of information assets.

Related Experiment Videos

  • Determining the likelihood of asset compromise.
  • Tailoring risk abatement processes to specific company vulnerabilities.
  • Implementing eight recommended security processes, including asset protection and incident response rehearsal.

    • Main Results:

    • Computer security can be effectively managed by focusing on risk, similar to quality assurance programs.
    • An operational approach involving all employees, not just IT, is crucial for security.
    • The goal is to reduce business risk to an acceptable level, not achieve impossible complete security.

    Conclusions:

    • Senior executives can manage digital security using familiar business tools and cost-benefit analysis.
    • Viewing security as an operational challenge empowers executives to lead risk mitigation efforts.
    • Proactive risk management is key to lessening the impact of cyber threats.