Information Security Awareness Among Privileged Users Of A Company

Security and ethical employees will continue to be a vital aspect of ensuring the success of an organization. There will always be a need for ethical IT security professional as hackers will continue to force organizations to make adjustments in their business models to protect their employees, data and customers. Many organizations and managers believe application security requires simply installing a perimeter firewall, or taking a few configuration measures to prevent applications or operating systems from being attacked. This is a risky misconception. By understanding threats and respect impacts, organizations will be equipped to maintain confidentiality, availability and

Employees must comply with legislation and ensure that their actions do not adversely affect others.

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

Any enterprise has to pay special attention to computer security. Computer security is a field that is concerned with the control of risks related to computer use. A primary focus should be on the external threats to the computing environment. In enterprise with branches cross country, it is important to allow information from "trusted" external sources, and disallow intrusion from anonymous or non-trusted sources. In a secure system, the authorized users of that system are still

WILLISON, R., & SIPONEN, M. (2009). Overcoming the insider: reducing employee computer crime through Situational Crime Prevention. Communications Of The ACM, 52(9),

Employees have to ensure that they follow the procedures/policies set by the organisation in terms of health and safety in the work place. They need to take responsibility that they will cause no harm to themselves or others in the way they orchestrate their working practices and to co-operate with employers

Petrenko. A. Employee responsibility [Power Point Slides]. Retrieved from Lecture Notes Online Web site: https://moodle.yorku.ca/moodle/course/view.php

Employee’s should also meet agreed objectives, attend work regularly and punctually, follow the sickness procedure if they are unwell, not smoke on the premises, attend allocated training, and follow the dress code.

Information security enabled by technology must include the means of lowering the impact of intentional and unintentional errors entering the system and to prevent unauthorized internally or externally accessing the system  actions to reduce risk data validation, pre-numbered forms, and reviews for duplications. It is crucial that the mission plan include the provision of a disaster recovery and business continuity plan. On the other hand, there is much more intrusion activity today than ever before. Obviously, there is an increased concern for attacks through companies’ network in an effort to either commit malice or affect the integrity of an organization’s most valuable resource. Therefore, it is important that companies do not get complacent in their IT infrastructure security. The fact of the matter, there is no perfect system; however, it behooves organizations to protect their information by way of reducing threats and vulnerabilities. Moreover, Whitman and Mattord (2010) said it best, “because of businesses and technology have become more fluid, the concept of computer security has been replaced by the concept of information security. Companies

Employees must take care of their own H&S and that of others who may be affected by their actions at work. They must also co-operate with employers and co-workers to help everyone meet their legal requirements.

Limitations of Research: Considering all the studies this paper also has limitations. Since Information security management is prominently growing area, the guidelines maybe unstable and quick changes can happen. However the loss can be overcome if the organization maintains its security policies in clear and update them timely.

The company should also try to protect employee who tell when there is dishonesty or employees are not following the company policies or the employee are violating a company law. The company should try to protect the individual who will tell whether the practices of the company are being followed. The company could give incentives for those who help tell about the inconsistent practices of the

Individual employees should be protected from penalties with regard to sensitive data that has been compromised/released. Since a majority of security breaches result from corporate culture, malicious attacks, or glitches in the system, employees should be protected from misdirected penalization. Such breaches may also stem from improper training of computer illiterate employees. With the many factors involved in a data breach, a company will benefit more from providing a great employee with proper safeguard procedures than from hiring a fresh employee, one just as likely to make such mistakes.

Employees: Workers have a duty to take care of their own health and safety and that

The concerned department within GT should monitor and pay sufficient attention to modify the awareness strategies with time otherwise it becomes obsolete as everything changes within GT. It could be automated or an audit team brought in to do the work. The following listed points are the issues I believe employees could be trained on even those who don’t use them or have access to them. This is inventory in security system shared in training. So,