Achieving an Integrated Design: The Way Forward for Information Security

Abstract

For some time it has been suggested in literature that information security is not just a technology problem, but that it also concerns people (Hitchings, 1994). Information systems and their associated controls are designed by people. The integrity of such systems rely on the designers knowledge of potential problems. It is also dependent on users adhering to security procedures. In addition, there is always someone with a high level of control in any system. This person could be someone authorized to transfer large sums of money or it could be a systems administrator with the highest level of privilege on the information system.