Review: Ogut, H. (2006). "Information technology security risk management." Ph.D. Dissertation: University of Texas at Dallas
The research that was conducted and presented here was almost entirely of a qualitative rather than a quantitative nature. The author attempts to quantify a great deal of information that is ultimately more complex, varied, and based on human decision-making factors than he truly accounts for, and this creates certain questions in many different areas and levels of his research and presentation. The fact that this dissertation is comprised of several wholly independent research projects and essays while still put forth by the author as a unified project with consistent findings and a coherent theme is another major weakness of the presentation. In many simple and direct regards, there is little doubt that the author's efforts yielded some solid findings through careful observations; the specific...
The author presents in a quantified manner data that is at least partially if not wholly qualitative, and at no point does the author acknowledge the sheer human uncertainties that are a part of the observation and thus the conclusions in this dissertation.
