Responsive regulation and the reporting of information security incidents-taiwan and china
Date
2012
Authors
Chang, Yao-Chung (Lennon)
Journal Title
Journal ISSN
Volume Title
Publisher
National Chengchi University of Taiwan
Abstract
As most software used by government agencies and companies is proprietary, malicious computer activity targeting breaches in that software can be likened to a pandemic of an infectious disease in the cyber world. When a breach occurs, the consequences can be widespread and damaging because the damage can spread rapidly. Therefore, cybercrime prevention needs to involve all users in a cooperative effort, with warnings and information on countermeasures distributed to users in order to prevent the "disease" from spreading when unprotected computers encounter an attack. This cooperative effort relies heavily on all institutions reporting information security incidents. Based on institutional theory, together with regulatory pluralism and responsive regulation theory, this paper examines the pluralized regulatory approach adopted to promote a system for sharing reports of information security incidents in Taiwan and China. An expanded model of regulatory enforcement and a strengths-basedpyramid are proposed and used as a frameworkfor discussing existing systems for encouraging the reporting of information security incidents.
Description
Keywords
Keywords: Expanded regulatory pyramid; Incident reporting; Information security; Institutional theory; Responsive regulation
Citation
Collections
Source
Issues and Studies
Type
Journal article
Book Title
Entity type
Access Statement
License Rights
DOI
Restricted until
2037-12-31
Downloads
File
Description