Factors Affecting the Objectives of Information Security Management

The issue of information security management (ISM) had been widely studied with different approaches and from different perspectives. To have the right security objectives is the primary step to achieving an effective security program. Based on the contingency theory, a conceptual model of factors that determine ISM objectives was proposed. To validate this model, a webbased survey with open-ended question was conducted. The responses from 120 certified information security practitioners were categorized and analyzed. The paper contributes to theory as it extends previous studies applying the technological, organizational and environmental framework to include factors that impact ISM. Further, it contributes to practice as it increases the awareness and importance of ISM

ISO 17799: Best Practices in Information Security Management?

To protect the information assets of organizations, many different standards and guidelines have been proposed. Among them, International standard ISO 17799 is one of the most prominent international efforts on information security. This standard provides both an authoritative statement on information security and the procedures to be adopted by organizations to ensure information security. Security professionals claim ISO 17799 to be a suitable model for information security management and an appropriate vehicle for addressing information security management issues in the modern organization. However, to our knowledge, no empirical studies have been conducted to validate this standard. Based on a survey of information security professionals, we found that ISO 17799 is comprehensive, but not parsimonious

The Interrelationship Between Objectives and Practices in Information Security Management

To help practitioners effectively implement security programs, we explored the interrelationship between security objectives and practices by conducting a canonical analysis based on the data from 354 certified security professionals. We found that for moderately information-sensitive organizations, “Confidentiality” had the highest correlation with information security practices. In these organizations, the security practice contributing most to the security objectives was “Access Control”. For highly information-sensitive organizations, the “Confidentiality”, “Accountability,” and “Integrity” together determine the security practices. In these organizations, the major security practices that impact on security objectives are: “Access Control”, “Organizational Security”, and “Security Policy”. “Access Control” was the only practice contributing to information security objectives in both groups. The items in this dimension focused mainly on technical controls

Study on the Origin and Fluid Identification of Low-Resistance Gas Reservoirs

The Wu 2 section of the Ke017 well block is a low-resistance gas reservoir with ultralow porosity and low permeability. The comprehensive analysis of rock lithology, physical properties, sedimentary characteristics, and gas content demonstrated that the development of micropores in illite/smectite dominated clay minerals together with the resulted additional conductivity capability and complex reservoir pore structures, as well as the enrichment of self-generating conductivity minerals like zeolites and pyrite which were the formation mechanisms of low-resistance gas layers in the Wu 2 section. A low-resistance gas reservoir has poor physical property, and it is difficult to distinguish the oil layer from the dry, gas, or water layers. In this paper, based on well/mud logging data and laboratory data, by taking advantages of the “excavation effect” of neutron gas and the dual-lateral resistivity difference between different depths, we successfully established a set of low-contrast log response methods for the identification and evaluation of oil layer and formation fluids. For a gas layer, the difference between neutron porosity and acoustic (or density) porosity is smaller than 0 and the difference in dual-lateral resistivity is greater than 0. For a water layer, the neutron porosity is similar to the acoustic (or density) porosity and the dual-lateral resistivity difference will be less than 0. While for a dry layer or a layer with both gas and water, the difference in porosity as well as dual-lateral resistivity is very small. The proposed method effectively solves the technical problem of oil layer and formation fluid identification in low-resistance gas reservoirs

Adaptation Analysis in IMERG Precipitation Estimation for the Dongting Lake Basin, China

Precipitation data from ground-based observatories in the Dongting Lake basin are often missing, resulting in large errors in surface precipitation data obtained by interpolation, which affects the accuracy of hydro-meteorological studies. Integrated Multisatellite Retrievals for Global Precipitation Measurement (IMERG) is the main high-resolution precipitation product, which is available to supplement measured missing data. To evaluate the applicability of this product in the Dongting Lake basin at multiple spatial and temporal scales, this paper analyzes daily, monthly, seasonal, annual, and extreme precipitation events of the three latest IMERG precipitation products (IPPs) (IMERG-F, IMERG-E, and IMERG-L) using eight statistical evaluation metrics. We find that the spatial and temporal performance of IMERG precipitation products varies over different time scales and topographic conditions. However, all three metrics (CC, RMSE, and RB) of the IMERG-F precipitation products outperform the IMERG-E and IMERG-L precipitation products for the same period. In the comparison of IMERG and TRMM (Tropical Rainfall Measuring Mission) precipitation products on monthly and seasonal scales, IMERG-F performed the best. IPPs can capture precipitation more accurately on seasonal scales and perform better in winter, indicating good detection of trace precipitation. Both high and low altitudes are not favorable for the satellite detection of extreme precipitation in both general and extreme precipitation events. Overall, the accuracy of IMERG-F with correction delay is slightly better than that of IMERG-E and IMERG-L without correction under near-real-time conditions, which is applicable in the Dongting Lake basin. However, the correction process also exacerbates overestimation of the precipitation extent