Modelling corporate wireless security and privacy Vasilios Katos, Carl Adams * Information Systems and Computer Applications, University of Portsmouth, Burnaby Terrace, Portsmouth PO1 3AE, UK Available online 10 August 2005 Abstract As corporations adopt wireless technologies then both privacy and security landscapes change dramatically, causing a reassessment of how the wireless systems can be secured and at the same time ensuring privacy obligations to their customers, staff and shareholders are met. This paper explores the relationship between wireless security and privacy issues, and develops the foundation for metrics with which to develop and examine appropriate policies. The challenge is to get consistent and supportive security and privacy policies. In addition, the adoption of a wireless infrastructure will result in richer sets of information flows, requiring additional resources to achieve the same level of security as in a wired infrastructure. Richer sets of information are also likely to have a negative impact on privacy. q 2005 Elsevier B.V. All rights reserved. Keywords: Corporate privacy; Information richness; Wireless security and privacy policies 1. Introduction Business, technology and societal changes have resulted in corresponding changes for corporations in how they develop and apply appropriate policies to conform to privacy and security obligations. One particular area where such changes seem imminent is with the current business and technology trends towards wireless technologies. A move towards wireless technologies is likely to have considerable strategic impact on a business (Barnes, 2003), as well as the security and privacy issues. For efficient operations, corporations have to ensure that consistent policies are developed, focusing the corporation in the same Journal of Strategic Information Systems 14 (2005) 307–321 www.elsevier.com/locate/jsis 0963-8687/$ - see front matter q 2005 Elsevier B.V. All rights reserved. doi:10.1016/j.jsis.2005.07.006 * Corresponding author. Tel.: C44 2392 846447. E-mail address: carl.adams@port.ac.uk (C. Adams).