Evaluating information assurance strategies

The information revolution has provided new and improved capabilities to rapidly disseminate and employ information in decision-making. Enhancing and enabling for today's modern industry, these capabilities are critical to our national infrastructures. These capabilities, however, often rely upon systems interconnected throughout the world, resulting in potentially increased vulnerability to attack and compromise of data by globally dispersed threats. This paper develops a methodology facilitating the generation of information assurance strategies and implementing measures to assess them. Upon reviewing key factors and features of information assurance, value focused thinking is used to develop an information assurance analysis framework.