Michael Edward Whitman, Ph.D., CISSP

Professor of Information Systems

March 16, 2006

 

Dept of Computer Science and Information Systems                                  

College of Science and Mathematics

Kennesaw State University

1000 Chastain Rd. MS 1101,

Kennesaw GA 30144 

770.499.3568

mwhitman@kennesaw.edu

 

Academic History:

 

Professor of Information Systems, Department of Computer Science and Information Systems, College of Science and Mathematics, Kennesaw State University, August 2004 to present.

Inaugural Coordinator, Bachelor of Science in Information Security and Assurance, November 2004 to present.

Tenure: awarded Fall 2002. 

Director, Masters of Science in Information Systems, April 2002 to June 2005.

Founding Director, KSU Center for Information Security Education and Awareness, January 2002 to present.

Coordinator, Bachelor of Science in Information Systems, September 2000 to April 2002.

Associate Professor of CSIS, Department of Computer Science and Information Systems, College of Science and Mathematics, Kennesaw State University, June 1998 to August 2004.

Assistant Professor of MIS, Department of Management, College of Business and Economics,    University of Nevada, Las Vegas, August 1994 to June 1998.

 

Education:

 

Ph.D. in Management Information Systems, Auburn University, 1994.

M.B.A., Concentration:  Management Information Systems, Auburn University, 1991. 

B.S. in Business Administration (Management), Auburn University, 1986.

 

Certified Information Systems Security Professional (CISSP), June 2002.

ABET-CAC Certified Information Systems Program Evaluator, August 2001.

 

Scholarship:

 

Books and Texts:

 

1.      Whitman, M. E. & Mattord, H. J.  Incident Response and Disaster Recovery, © 2006 Course Technology, Boston, MA. ISBN 1-4188-3663-X. forthcoming

2.      Whitman, M. E. & Mattord, H. J. Principles of Information Security, 2nd ed. © 2005 Course Technology. Boston, MA. ISBN 0-619-21625-5. (Note Text adopted in over 400 institutions globally, recommended reading for CISSP Certification)

 

3.      Whitman, M. E., Shackleford, D. & Mattord, H. Hands-On Information Security Lab Manual, 2nd ed. © 2005 Course Technology. Boston, MA. ISBN 0-619-21631-X. 

 

4.      Whitman, M.E. & Mattord, H. J. Readings and Cases in the Management of Information Security. © 2005 Course Technology. Boston, MA. ISBN 0-619-21631-X. 

 

5.      Whitman, M. E. & Mattord, H. Management of Information Security. © 2004 Course Technology, Boston, MA.  ISBN: 0-619-21515-1. (Note: Text adopted in over 100 institutions globally, required reading for ASIS certification).

 

6.      Whitman, M. E. & Mattord, H. Principles of Information Security. © 2003 Course Technology. Boston, MA. ISBN 0-619-06318-1.

 

7.      Whitman, M. E. & Woszczynski, A. (editors) The Handbook for Information Systems Research. © 2004 Idea Group Publications, Hershey, PA. ISBN 1-591-40144-5.

 

8.      Whitman, M. E. & Shackleford, D. Hands-On Information Security Lab Manual. © 2003 Thompson Custom Publishing. Boston, MA. ISBN 0-759-31283-4. 

 

Peer-Reviewed Journal Publications:

 

1.      Whitman, M. E. “Enemy at the Gates: Threats to Information Security.” Communications of the ACM, 46(8), August 2003, pp. 91-95.

 

2.      Whitman, M. E., Perez, J. and Beise, C. “Attitudes Towards the Use of Persistent Cookies,” The Journal of Computer Information Systems, 41(3). Spring 2001. pp. 1-7.

 

3.      Whitman, M. E. “Service Learning in Information Systems Curriculum: A Networking Perspective” Journal of Informatics Education and Research, 2(3). Fall 2000.  pp. 27-36.

 

4.      Whitman, M. E., Townsend, A. M. & Hendrickson, A. R. “Cross-National Differences In Computer-Use Ethics: A Nine Country Study.” The Journal of International Business Studies, 30(4). 1999. pp. 673-687.

 

5.      Whitman, M. E., Townsend, A. M. & Aalberts, R. J., “Considerations for an Effective Telecommunications-Use Policy.” Communications of the ACM, 42(6). June 1999. pp. 101-109.

6.      Whitman, M. E. Hendrickson, A. R. & Townsend, A. M. “Academic Rewards for Teaching, Research and Service: Data and Discourse.” Information Systems Research, 10(2). June 1999, pp. 99-109.

 

7.      Whitman, M. E., Townsend, A. M. & Aalberts, R. J.  “The Communications Decency Act: An Update for IS Management,” Information Systems Management, 16(1). Winter 1999, pp. 91-95.

 

8.      Townsend, A. M., Whitman, M. E., Hendrickson, A. R. & Fields, D. A. “An Examination of Computer-Use Ethics in Hong Kong and the United States,” Journal of International Information Management. 7(1). Spring 1998, pp. 29-38.

 

9.      Whitman, M. E., Townsend A. M. & Aalberts. R. J. “The Academic Telecommunications-Use Policy,” The Journal of Education for MIS, 5(1), 1998, pp. 91-97.

 

10.  Whitman, M. E., Townsend, A. M., Hendrickson, A. R., & Rensvold, R. B. “Computer Aversion And Computer-Use Ethics In US And Asian Cultures.” The Journal of Computer Information Systems. 38(4). Summer 1998. pp. 19-24.

 

11.  Hendrickson, A. R., Townsend, A. M., Whitman, M. E., & DeMarie, S.M. “An Examination Of Team Development On Computer-Mediated Decision Processes.” The Journal of Computer Information Systems. 38(2). Winter 1997-8. pp. 14-17.

 

12.  Whitman, M. E.  “A Look at the Telecommunications Act Of 1996.” Information Systems Management. 14(3). Summer 1997. pp. 82-86. Reprinted in End User Computing Management. 91-00-39(V-3). 1997. pp. 1-9.

 

13.  Whitman, M. E. & Gibson, M. L. “IT Importance in Supporting Reengineering: Performance Perceptions Versus Reality.” The Journal of Computer Information Systems. 37(4). Summer 1997. pp. 18-23.

 

14.  Whitman, M. E. & Gibson, M. L.  “Factors Affecting the Use of Information Technology in Business Process Reengineering.” Information Resources Management Journal. 10(3). Summer 1997. pp. 5-17.

 

15.  Townsend, A. M., Aalberts, R. J., & Whitman, M. E.  “Danger on the Desktop: The Telecommunications Act of 1996: Implications for Organizational Policy.” HRMagazine. (peer reviewed by request). 42(1). January 1997. pp. 82-85.

 

16.  Whitman, M. E. & Hendrickson, A. R. “IS Ethical Issues for Business Management” Ethics and Critical Thinking Quarterly Journal. 38(408). March 1996. pp. 60-98.

 

17.  Whitman, M. E. & Gibson, M. L. "Enterprise Modeling Support for Strategic Business Engineering." Information Systems Management. 13(2). Spring 1996. pp. 64-72.

 

 

Editorially Reviewed Journal Publications:

 

18.  Whitman, M. E. & Mattord, H. “Making Users Mindful of IT Security” Security Management, 48(11). November 2004.  pg. 32.
 

19.  Whitman, M. E. “Threats to Information Systems Security: An Update” International Journal of Information Management, 24(1) February 2004. pp 43-57.

20.  Mattord, H. & Whitman, M. E. “Assurance for the Intranet” Journal of Internet Security, 3(1) September 2002,, http://www.addsecure.net/jisec/current.asp.

21.  Whitman, M. E., Townsend, A. M. & Aalberts R. J. “Cyber-Squatting: A Case Of First Come, First Server or Piracy On The Cyber-Seas?” Information Systems Security. 8(1), Spring 1999.

 

22.  Whitman, M. E., Townsend, A. M., Hendrickson, A. R. & Fields, D. A., “An Examination Of Cross-National Differences In Computer-Related Ethical Decision Making.” ACMSIG Computers and Society. 28(4). December 1998. pp. 22-27.

 

23.  Aalberts, R. J., Townsend, A. M., & Whitman, M. E. “The Threat of Long-arm Jurisdiction to Electronic Commerce.” Communications of the ACM. 41(12). December 1998, pp. 15-20. Reprinted in Computers and Society, Schellenberger, K. (Ed.): Dushkin/McGraw Hill: Guilford, 2000: 26-30.  Reprinted in Intellectual Property in the Age of Universal Access. ACM: Critical Thinking Issue: New York 1(1).

 

24.  Townsend, A. M., DeMarie, S.M., Hendrickson, A. R., & Whitman, M. E., “Technology at the Top: Planning Support Systems and Strategy Formulation,” SAM: Advanced Management Journal. 65(1). 2000. pp. 31-37.

 

25.  Whitman, M. E., Townsend, A. M. & Aalberts R. J. “The Communications Decency Act: It’s Not as Dead as You Think.” Communications of the ACM. 42(1). January 1999, pp. 15-18. Reprinted in Intellectual Property in the Age of Universal Access. ACM: Critical Thinking Issue: New York 1(1), 2000 pp. 24-28.

 

26.  Townsend, A. M., Aalberts, R. J. & Whitman, M. E.. What’s Left of the CDA?” HRMagazine. 43(7). June 1998. 124-129. Reprinted in Perspectives: Technology and Society.  Dianne Fallon, York County Technical College.

 

27.  Townsend, A. M., Aalberts, R. J. & Whitman, M. E.  “Employer Liability under the Communications Decency Act: Developing an Effective Policy Response.” Employee Responsibilities and Rights Journal. 12(1). March 2000. pp. 39-46.

 

28.  Aalberts, R. J., Townsend A. M., Whitman M. E. & Seidman, L. H., “Proposed Model Policy For Managing Telecommunications-Related Sexual Harassment In The Workplace.” Labor Law Journal. 48(10). October 1997. pp. 616-626.

 

29.  Whitman, M. E.  “IT Divergence In Reengineering Support: Performance Expectations Vs. Perceptions.”  Information & Management. 30(5). August 1996. pp. 239-250.

 

30.  Townsend, A. M., Whitman, M. E. & Hendrickson, A. R. “Computer Support System Adds Power to Your Group Processes.” HRMagazine. 40(9). September 1995. pp. 87-91.

 

31.  Gehling, R.G., Whitman, M. E. & Gibson, M. L. "Improving Information Management with Imaging." End User Computing Management. 93-00-60(Z-8). August 1995. pp. 1-13.

 

32.  Whitman, M. E. & Carr, H.H. "The Impact of Client/Server Architecture (C/SA) on Decision Support Systems." Information Strategy: The Executive's Journal. 10(2). Winter 1994. pp. 12-22.

 

33.  Gardiner, S.C., Whitman, M. E., Miller, M.D. & Gibson, M. L.  "Operations Management's Role in Enterprise Modeling." Data Base Management. 22-10-23(Y-5). May 1994. pp. 1-15.

 

Dissertation:

 

"Factors Affecting the Use of Information Technology in Strategic Business Re-Engineering."  defended 5 August 1994, chair Gibson, M. L.

 

Book Chapters (all peer reviewed unless indicated as reprint)

 

1.      Whitman, M. E. “Information Security Policy – from Design to Implementation and Creation” Information Security Policies and Strategies – An Advances in MIS monograph. Goodman, S., Straub, D., & Zwass, V. (eds). M.E. Sharp, Inc, Publisher, Armonk NY.  Forthcoming.

2.      Whitman, M. E. and Mattord, H. J. “Zen and the Art of Information Security” in Whitman, M.E. & Mattord, H. J. (eds) Readings and Cases in the Management of Information Security. © 2005 Course Technology. Boston, MA. ISBN 0-619-21631-X. forthcoming. 

 

3.      Mattord, H. J. and Whitman, M. E. “Transparency in InfoSec System Design” in Whitman, M.E. & Mattord, H. J. (eds) Readings and Cases in the Management of Information Security. © 2005 Course Technology. Boston, MA. ISBN 0-619-21631-X. forthcoming. 

 

4.      Mattord, H. J. & Whitman, M. E. “Information Security Policy: The Unmet Need” Encyclopedia of Information Science and Technology. Medhi Khosrow-Pour (ed). Idea Group Publishing. August 2004.

 

5.      Whitman, M. E. & Woszczynski, A. M. “Exemplary Work in IS Research: Past and Present” The Handbook for IS Research, Whitman & Woszczynski (eds), Idea Group Publications, Hershey, PA. 2004. pp.

6.       Woszczynski, A. M. & Whitman, M. E. “Common Method Variance: Implications for IS Research” The Handbook for IS Research, Whitman and Woszczynski (eds), Idea Group Publications, Hershey, PA. 2004. pp.

7.      Whitman, M. E., Townsend, A. M. & Aalberts, R. J. “Information Systems Security and the Need for Policy” Information Security Management: Global Challenges in the Next Millennium, Dhillon, G. (Ed.). 2000. pp. 9-19.

 

8.      Aalberts, R. J., Townsend, A. M., & Whitman, M. E. “The Threat of Long-arm Jurisdiction to Electronic Commerce” (reprint from CACM, Dec. 1998) Computer Studies: Computers in Society, Ch.5, Dushkin/McGraw‑Hill Publishers, Kathryn Schellenberg, Ed.  August 1999.

 

9.      Whitman, M. E. & Gibson, M. L. “Enterprise Modeling for Strategic Support” (reprint) Handbook of IS Management. (reprint from 5th ed.) 6th ed. R.E. Umbaugh, editor, Auerbach Publications, Boston, MA, 1999.

 

10.  Whitman, M. E. & Gibson, M. L. “Enterprise Modeling for Strategic Support” (reprint) Handbook of IS Management. 5th ed. R.E. Umbaugh, editor, Auerbach Publications, Boston, MA, 1997.

 

11.  Whitman, M. E., R. Bryan, A. Wagner & Gibson, M. L. “Business Process Redesign as Projects From Conception to Implementation” The Human Side of Information Technology Management. Szewczak & Khosrowpour (Ed.). Idea Group Publishing, Harrisburg, PA. 1996. pp. 89-110.

 

Proceedings / Papers Presented
All proceedings peer reviewed unless otherwise annotated. 
Papers presenter is indicated by *.

 

1.      Whitman, M. E.* Computer Search and Seizure in the Academic Arena: An Update, Proceedings of the 2005 Rock Eagle University System Annual Computing Conference, October 26-28, 2005. Reposted at e-Evidence.info (http://www.e-evidence.info/w.html).

2.      Mattord, H. J.* & Whitman, M. E., Leveraging Academic Resources to Improve Information Assurance on Your Campus. Proceedings of the 2005 Rock Eagle University System Annual Computing Conference, October 26-28, 2005.

3.      Whitman, M., Caylor, J.,* Fendler, P. & Baker D. (Kennesaw State Univ.) Rebuilding the Human Firewall, Proceedings of the 2005 Information Security Curriculum Development Conference, September 23-24, 2005.
 

4.      Whitman, M. E. * and Mattord, H. J. “Workshop on Designing and Teaching Information Security Curriculum” Proceedings of the 2005 ACM Southeast Conference, Kennesaw, GA March 18-20, 2005.

5.      Whitman, M.E.* “Computer Forensics Search and Seizure: Challenges in the Academe” Proceedings of the Southern Association for Information Systems Conference, February 2005.

 

6.      Whitman, M. E. * & Mattord, H. J. “A Model Curriculum for Programs of Study in Information Security & Assurance” Proceedings of the 2004 Information Security Curriculum Development Conference. Kennesaw, GA. October 8, 2004.

 

7.      Mattord, H. J.* & Whitman, M. E. “Designing and Conducting Information Security Laboratory Exercises” Proceedings of the 2004 Information Security Curriculum Development Conference. Kennesaw, GA. October 8, 2004.

 

8.      Whitman, M. E. * and Mattord, H. J. “Workshop on Designing and Teaching Information Security Curriculum” Proceedings of the 2004 Americas Conference on Information Systems, New York, NY, August 6, 2004.

 

9.      Whitman, M. E. * and Mattord, H. J. “Developing and Teaching Information Security Curriculum” Proceedings of the 8th Annual Colloquium for Information Systems Security, West Point, NY, June 6-10, 2004.

 

10.  Mattord, H. J.* and Whitman, M. E. “Teaching Information Security Policy” Proceedings of the 8th Annual Colloquium for Information Systems Security, West Point, NY, June 6-10, 2004.

 

11.  Whitman, M.E. * & Mattord, H.J.  “A Curriculum Model for Programs of Study in Information Security and Assurance” Proceedings of the Southern Association for Information Systems Conference, February 2004.

12.  Mattord, H.J.* & Whitman, M.E. “Improving Information Security Through Policy Implementation” Proceedings of the Southern Association for Information Systems Conference, February 2004.

 

13.  Hoganson, K. & Whitman M. E.* “Information Systems Programs: Variations on a Theme”, Proceedings of the 2003 Conference of the Southern Association of Information Systems, Savannah,