Saatavana elektronisessa muodossa - Tietojenkäsittelytieteiden ...

85model. In: Proceedings of the 3rd Annual Conference on information SecurityCurriculum Development (Kennesaw, Georgia, September 22 - 23, 2006).InfoSecCD '06. ACM Press, New York, NY, 194 – 196.[Blakley, et. al., 2001] Bob Blakley and Ellen McDermott and Dan Geer,Information security is information risk management. In: Proceedings ofthe 2001 workshop on New security paradigms, Cloudcroft, New Mexico,2001, 97 – 104.[Botha and Boon, 2003] Hanneri Botha and J.A. Boon, The information audit:Principles and guidelines. Libri. 53 (2003) 23 – 38.[Boyce and Jennings, 2002] Joseph G. Boyce and Dan W. Jennings, Informationassurance: managing organizational IT security risks. Elsevier Science, USA,2002.[Buchanan and Gibb, 1998] Steven Buchanan and Forbes Gibb, The informationaudit: an integrated strategic approach. International Journal of InformationManagement. 18 (1998),1, 29-47.[Calder, 2007] Alan Calder, Information Security and ISO27001 – anIntroduction. Priefing paper, Copyright © IT Governance Ltd 2005 – 2007.Also available as:http://www.itgovernance.co.uk/files/download/Infosec_101v1.2.pdf.[CERT, 2007] CERT www-sivusto, OCTAVE® Information Security RiskEvaluation. http://www.cert.org/octave/. Luettu 15.8.2007.[Eskola ja Suoranta, 1996] Jari Eskola ja Juha Suoranta, Johdatus laadulliseentutkimukseen. Lapin yliopistopaino, Rovaniemi, 1996.[Haarmanen, 1998] Pertti Haarmanen, Kunnallishallinnon tietoturvallisuus.Suomen Kuntaliitto, Kuntaliiton painatuskeskus, Helsinki, 1998.[Harmaakorpi et. al., 2004] Vesa Harmaakorpi, Helinä Melkas, Timo Pihkala,Tomi Tura ja Tuomo Uotila, Päijät-Hämeen palvelurakenne –tulevaisuustarkastelu. Päijät-Hämeen Liitto A147, 2004.