The information security policy unpacked:a critical study of the content of university policies

Ensuring the security of corporate information, that is increasingly stored, processed and disseminated using information and communications technologies [ICTs], has become an extremely complex and challenging activity. This is a particularly important concern for knowledge-intensive organisations, such as universities, as the effective conduct of their core teaching and research activities is becoming ever more reliant on the availability, integrity and accuracy of computer-based information resources. One increasingly important mechanism for reducing the occurrence of security breaches, and in so doing, protecting corporate information, is through the formulation and application of a formal information security policy (InSPy). Whilst a great deal has now been written about the importance and role of the information security policy, and approaches to its formulation and dissemination, there is relatively little empirical material that explicitly addresses the structure or content of security policies. The broad aim of the study, reported in this paper, is to fill this gap in the literature by critically examining the structure and content of authentic information security policies, rather than simply making general prescriptions about what they ought to contain. Having established the structure and key features of the reviewed policies, the paper critically explores the underlying conceptualisation of information security embedded in the policies. There are two important conclusions to be drawn from this study: (1) the wide diversity of disparate policies and standards in use is unlikely to foster a coherent approach to security management; and (2) the range of specific issues explicitly covered in university policies is surprisingly low, and reflects a highly techno-centric view of information security management.

Redefining 'media' using a 'media-as-a-constitutional-component' concept:an evaluation of the need for the European Court of Human Rights to alter its understanding of 'media' within a new media landscape

This paper considers the impact of new media on freedom of expression and media freedom within the context of the European Convention on Human Rights and European Court of Human Rights jurisprudence. Through comparative analysis of US jurisprudence and scholarship, this paper deals with the following three issues. First, it explores the traditional purpose of the media, and how media freedom, as opposed to freedom of expression, has been subject to privileged protection, within an ECHR context at least. Secondly, it considers the emergence of new media, and how it can be differentiated from the traditional media. Finally, it analyses the philosophical justifications for freedom of expression, and how they enable a workable definition of the media based upon the concept of the media-as-a-constitutional-component.