Integrating Information Security through Total Quality Management

Abstract

As companies begin to increase their electronic presence, digitizing increasingly more of their private and sensitive information, the need for information security becomes mandatory. While the relationship between technology and business functionality expands, information security has safeguarded the information the business needs to survive. Organizations are increasingly aware of information security issues and are constantly seeking control measures. Information security studies predominantly focused on the presence of information security controls rather than the quality of those controls. Security, as an element of quality, must be addressed in the development, implementation, and monitoring of strategy and policy. In order to ensure that adequate controls are established for information systems, quality assurance and information systems auditors should maintain a close working relationship. Total Quality Management is mandatory in the successful application and proliferation of information security controls.

Additional information

Notes on contributors

Sarah Schiltz

Sarah Schiltz is currently a graduate student in the Technology Systems Department at East Carolina University and received her B.S. in Biology from UNC—Wilmington. She has multiple years experience working in Quality and functions as the Quality Assurance Coordinator for a local nonprofit organization. She can be reached [email protected]