Legal Issues Of Information Security

In this document I will be discussing the laws that are related to security and privacy of datas, I will explain how they relate to the security and privacy of data.

The above stated problems are mostly related to the InfoSec principle. InfoSec principle helps in protecting information from unauthorized access, modification, disruption, destruction etc. The confidentiality, integrity, availability, non-repudiation and availability are some of the parameters which fall under InfoSec principles and understanding any security breach such as malware attacks, risk of hackers when studied in light of these parameters, can help in solving the

Some security risks involved with conducting business online are imposters, eavesdroppers and thieves. Also, there are crackers or hackers, which are people who write programs and manipulate technologies to obtain unauthorized access to computers and networks. The elements of computer security are secrecy, integrity and necessity. Secrecy is protecting against unauthorized data disclosure. Integrity is preventing data from being modified by someone who is unauthorized and ensuring that the contents of emails aren’t changed before they get to he recipient. Necessity is preventing data delays or denials. It is important to establish a security policy to protect assets, to define acceptance and unacceptable behavior and to review physical and

Personal data are regulated by United Nations and urges States to implement effective measures to ensure that information concerning a person´s private life does not reach the hands of person who are not authorized by law to receive,process and use it.Thus private data are protected not only by law of States also by international laws, and concerning computer misuse

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

Any enterprise has to pay special attention to computer security. Computer security is a field that is concerned with the control of risks related to computer use. A primary focus should be on the external threats to the computing environment. In enterprise with branches cross country, it is important to allow information from "trusted" external sources, and disallow intrusion from anonymous or non-trusted sources. In a secure system, the authorized users of that system are still

Computer security is the security applied to the computers and their networks including the internet. Physical security and information security are the two types of computer securities which prevent theft of equipment and data. (Man, 2015).

The continuous proliferation of information facilitated by the advancement in technology is a constant and continuous threat to information security and privacy. The various schemes and acts by the various government agencies in sectors such as health, finance and so on amongst other acts have constituted to information vulnerability and enhanced the breach of information security. Many people are of the opinion that the government has legalized spying on them, acquiring and using their private data at will. The confidentiality, Integrity and Availability of information has been greatly affected and many private information have been released to the public domain either

Grama, J. L. (2015). Legal issues in information security (2nd ed.). Burlington, MA: Jones &

All workers of this organization oversee ensuring that data is secured appropriately. Senior administration oversees issuing and embracing this Security Policy. They perceive the delicate idea of the data that the association stores and forms, and the genuine potential mischief that could be caused by security occurrences influencing this data. They will along these lines give the most astounding need to data security. This will imply that security matters will be considered as a high need in settling on any organization choices. This will help Campbell Computer Consulting and Technology Company to assign adequate human specialized and budgetary assets to data security administration and to make a proper move considering all infringement of Security

Moreover, now days using information system is not as walking as in the park, it has many new security treats that the company might lose their confidential data, financial and personal information.

While all of these technologies have enabled exciting changes and opportunities for businesses, they have also created a unique set of challenges for business managers. Chief among all concerns about technology is the issue of information security. It seems to be almost a weekly occurrence to see a news article about yet another breach of security and loss of sensitive data. Many people will remember high profile data breaches from companies such as T.J Maxx, Boston Market, Sports Authority, and OfficeMax. In the case of T.J. Maxx, a data breach resulted in the loss of more than 45 million credit and debit card numbers. In many of these incidents, the root cause is a lack of adequate security practices within the company. The same technologies that enable managers can also be used against them. Because of this, businesses must take appropriate steps to ensure their data remains secure and their communications remain

The use of information technology in business presents major security challenges, poses serious ethical question, and affects society in significant ways. Especially, the computer crime is a growing threat to society and is caused by the criminal or irresponsible actions of individuals who are taking advantage of the widespread use and vulnerability of computers and the Internet and other networks. It presents a major challenge to the integrity, safety, and survival of most business systems.

“The cyber security landscape has changed in the past couple of years – and not for the better” (Steen, 2013). Banks are faced with attacks to retrieve customer account information, the military battles with attempts to obtain secrets. These attacks are not just committed by induvial hackers but entire countries. Data privacy rules differ from country to country. For example, Fisher, 2014 states individual search engine access is restricted in different ways depending on the country. China along with other countries restrict access to politically sensitive information, while the United States protects the free flow of information (Gonzalez-Padron, 2014). With companies relying more on technology such as cloud computing and virtual storage their level of vulnerability rises. IT personnel have the difficult task of protecting company data, this is why it is vital to have an ethical compliance program in place protect the organization from internal and external threats.

Almost all kind of large and small organizations might face increasing number of attacks into their network or intellectual property. This may lead to data disclosure, data destruction, and damage of organization’s reputation. There are numerous threats in the cyber space which might be capable of stealing, destroying or making use of out sensitive data for financial and non-financial gains. As the amount of computer, mobile and internet users increases, so does the number of exploiters.