Skip to Main content Skip to Navigation
Theses

Management de la sécurité de l'information : mise en oeuvre, évaluation et pilotage de la sécurité de l'information dans les organisations

Abstract : This thesis addresses the problem of information security management within organizations. Through a series of theoretical and empirical analyses, it proposes (i) an exploratory model of the engagement of organizations in the governance of information security based on the Unified Theory of Acceptance and Use of Technology by Venkatesh et al. (2003), (ii) a quantitative decision model for evaluation and forecasting of information security based on game theory by Von Neumann and Morgenstern (1944) in its stochastic version formalized by Shapley (1953), and (iii) a model of balanced scorecard using the original method of Kaplan and Norton (1992) for performance measurement and management of information security. Various methodological approaches have been applied to test these proposals, including a questionnaire survey (120 respondents), a brainstorming with votes (68 participants), an in-depth case study, two ex post analyses of fifteen security projects, a Metaplan session (32 participants), and a longitudinal case study. Our research results in an undeniable advance in traditional management models for information security, made possible by the use of interdisciplinary theoretical and methodological bases. In practice, the research provides the decision maker with a comprehensive framework for the management of information security, enabling him to engage the organization knowingly in the process, to evaluate its security status and establish forecasts or comparisons, to control and continuously improve the management of information security within the organization, and ultimately to contribute to the organization's overall performance and competitiveness.
Document type :
Theses
File URL :
http://docnum.univ-lorraine.fr/prive/BUG_T_2011_0006_DAGORN.pdf
Complete list of metadata

https://hal.univ-lorraine.fr/tel-01749144
Contributor : Thèses Ul Connect in order to contact the contributor
Submitted on : Thursday, March 29, 2018 - 12:07:41 PM
Last modification on : Monday, March 29, 2021 - 11:30:03 AM

Identifiers

  • HAL Id : tel-01749144, version 1

Citation

Nathalie Dagorn. Management de la sécurité de l'information : mise en oeuvre, évaluation et pilotage de la sécurité de l'information dans les organisations. Gestion et management. Université Nancy 2, 2011. Français. ⟨NNT : 2011NAN22006⟩. ⟨tel-01749144⟩

Share

Metrics

Record views

66