A Literature Review On Information Security Compliance Behavior

Technology has facilitated the use of transiting data. With that in mind, sensitive information must be kept within close safe guards. Failure to protect vital information may facilitate its retrieval by criminals or those with malicious intents to use that data unethically. Individuals with access to material non-public information may sell that information to an outside party for profit. Likewise, these individuals may harvest this data within their perimeters to use as ammunition to defraud or blackmail an organization. Employers need to be wary of the threat of insiders exposing sensitive information to outside parties. “An insider is anyone who has intimate knowledge of internal operations and processes, or trusted access to

As it was pointed out in a global security survey organizations are “haunted” by threats and that raises the concerns and demonstrates how vulnerable they are to attacks. The 48 per cent it thinks it is exposed to loss of data (information leakage) in another case 46 per cent in phishing and pharming and that pairs with the fact that the weakest link in the security system of an organization that causes failure is humans(such as employees, customers) with 86 per cent (Deloitte, 2009: 29-30). Therefore based on the information provided by these surveys, corporate intranets are the main target of internet attacks

As such, our company’s people resources pose the greatest risk for security breach. Our way to help mitigate risk in this area is to keep communication lines open in this area and to continually mandate security knowledge training, with mandatory updates on a regular basis. When the employees are informed of company policy when facing a security matter, they are better equipped to act in the best or right way. In this way knowledge is power – or at least empowerment to act in the best interest of the company’s information security.

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

In order to diminish both security and privacy risks to organizations, measures need to be taken to combat risks throughout the various stages of the threat’s life cycle. Specific processes must be implemented to identify threats, procedures to follow when the attack occurs, and finally methods to recover from the attack (Houlding, 2011).

While running businesses, owners must be aware of crucial security threats that their organizations are exposed to in order to formulate

It is quite unfortunate that most companies’ management only deals with the administrative, marketing and sales, and the production part of the company business, but felt the IT operations should be left solely to the IT personnel. In the long run, according to this chapter, the information security aspect of the company will suffer and remain underdeveloped because of lack of attention. However, if there is any security breach or attack, the top management will be the first point of contact. The top management will be held accountable and responsible for not adhering to the business practices.

Network intrusion may be a difficult task to complete with advances in network security, but with evolving technology and the availability of information on the Internet, network intrusion prevention may be the harder task. It was mentioned above that one must get to know his enemy before the attack; the same can be said if the roles are switched and one is on the defense. To obtain and maintain network security, motives for network intrusion must be analyzed. Take for example the attack that was conducted on the Office of Personnel Management which acts as the United States Government 's Human Resources department. On June 4th, 2015, the Office of Personnel Management disclosed a statement saying “Personnel data, including personally

While all of these technologies have enabled exciting changes and opportunities for businesses, they have also created a unique set of challenges for business managers. Chief among all concerns about technology is the issue of information security. It seems to be almost a weekly occurrence to see a news article about yet another breach of security and loss of sensitive data. Many people will remember high profile data breaches from companies such as T.J Maxx, Boston Market, Sports Authority, and OfficeMax. In the case of T.J. Maxx, a data breach resulted in the loss of more than 45 million credit and debit card numbers. In many of these incidents, the root cause is a lack of adequate security practices within the company. The same technologies that enable managers can also be used against them. Because of this, businesses must take appropriate steps to ensure their data remains secure and their communications remain

Information security is vital in organizations; more so in this era where terrorism and hacking are the order of the day. The cost of ensuring a reliable information security is high (Gulati, p.2-3). However, cyber-attacks can vary in costs and outweigh the process of security measures in place to protect information (Manske, p.55). The cost of reputation after an attack can be a major blow to the running of an organization. For instance, if an attacker access credit card information the customers may withdraw from the company or refrain from its services. Court cases against the loss of confidential information may spoil the reputation of a company . When the computer systems have been accessed illegally, the systems must be inspected, fixed and re-secured. Hackers publicly expose the hacked information; clients, sellers and investors may avoid associating with the

When cybersecurity policy is discussed the topics often focus on technology, corporate culture, and security awareness. The success of an organization in defending its most valuable asset, data, depends on the proper implementation of several security practices. Ensuring that the “human aspect” of cyber security is addressed is vital, for the culture of an organization can greatly impact both the security posture and defense of information networks.

The information age is the age we live in today, hence we must make sure that the use of the information readily available to many people is not abused. There are many different types of security threats to the average person, business or even government. The risks faced by individuals and entities are rising, thus measures to avoid these privacy and security breaches would be discussed accordingly assisting and allowing firms to remain, fraud free and protected.

A threat is anything that represents a risk to information property. There are many several threats that represent a persistent danger to people and organizations information assets. In this report, I will cover four remarkable threats and their countermeasures. These threats are Security threats, Netiquette threats, Privacy threats, and Ethics threats.

Stanton, Mastrangelo and Jolton (2004) explained the analysis they made of end user security behavior. In fact, it promotes the action of a superior end-user behavior restricting poor end user and provides an important way for efficient production of information security in the organization. In addition, Stanton, Mastrangelo and Jolton (2004) when the user's information technology organization established they can affect the security of the information required in response to describe both harmful behavior and representative of information technology experts, management implementation, and interviews with 110 regular employees. Intentionality and technical expertise As a result, they have developed a taxonomy of six elements of safety behavior

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.