Abstract
Many alternative methods for designing secure information systems (SIS) have been proposed to ensure system security. However, within all the literature on SIS methods, there exists little theoretically grounded work that addresses the fundamental requirements and goals of SIS design. This paper first uses design theory to develop a SIS design theory framework that defines six requirements for SIS design methods, and second, shows how known SIS design methods fail to satisfy these requirements. Third, the paper describes a SIS design method that does address these requirements and reports two empirical studies that demonstrate the validity of the proposed framework.
Recommended Citation
Heikka, Juhani; Baskerville, Richard; and Siponen, Mikko
(2006)
"A Design Theory for Secure Information Systems Design Methods,"
Journal of the Association for Information Systems, 7(11), .
DOI: 10.17705/1jais.00107
Available at:
https://aisel.aisnet.org/jais/vol7/iss11/31
DOI
10.17705/1jais.00107
When commenting on articles, please be friendly, welcoming, respectful and abide by the AIS eLibrary Discussion Thread Code of Conduct posted here.