Abstract (EN)

In this paper, we argue that parallels can be drawn between information and knowledge systems security (IKSS) concerns of today’s organizations and quality management concerns of early twentieth century organizations. We propose a literature review of some Total Quality Management (TQM) and Lean Management (LM) solutions that may be relevant for information and knowledge systems security. This hybridization of IKSS and TQM/LM domains leads to propose innovative solutions for IKSS, notably by considering assignable causes and chance causes of security failures within organizations. Even if this work is still at an early stage, our approach suggests a shift from “security assurance” to “security control” within information and knowledge systems (IKS).