Security Monitoring

Risk assessment and threat assessment should go hand-in-hand.The outcome of the risk assessment and threat assessment should provide recommendations that maximize the protection of confidentiality, integrity and availability while still providing functionality and usability. The purpose of a risk assessment is to ensure sensitive data and valuable assets are protected. An organization should take a hard look at who has access to sensitive data and if those accesses are required. The security audit should monitor the companies systems and users to detect illicit activity.The security audit should

In order to diminish both security and privacy risks to organizations, measures need to be taken to combat risks throughout the various stages of the threat’s life cycle. Specific processes must be implemented to identify threats, procedures to follow when the attack occurs, and finally methods to recover from the attack (Houlding, 2011).

One important part of E-Commerce is maintaining stringent site security, confidentiality for the customers, integrity, and availability, also a secure system must contain authentication verification of the user, Authorization, allowing manipulation of the resources in a specific way and Encryption for records and transactions.

Risk analysis is an integral part of data safety within an organization and the analysis is vital to the mission and success of an organization. Risk analysis is used “to identify threats and then provide recommendations to address these threats” (Taylor et al, 2006). Risk analysis encompasses not only the equipment and programs used in an organization but also covers the culture, managerial, and administrative processes to assure data security. A key factor in risk analysis is to have a good Information Resource Management Plan.

E-commerce security depends on a complex interrelationship between different components including the application development platforms, database management systems, and system software and network infrastructure.

In today’s world, it is vital for each and every organisation to collect and keep personnel data of the organisation. Human resource function is such a vital role in any organisation as it is responsible for collecting accurate data and how that data should be managed. Human resource function also covers the legal implications of storing data and will enable managers to record data and information and to interpret, analyse and present information clearly and accurately in an appropriate format in support for decision making.

After the information system is installed, the IS security controls must be monitored and assessed on a continuous basis. Continuous monitoring ensures the security controls in place are effective. In this step, there are five tasks. The first task requires managers to determine the security impact based on the threat environment. The second task is conducting assessments on certain security controls as outlined in their Continuous Monitoring Strategy. The third task is correcting discrepancies found in the assessment. The fourth task requires updating the Security Authorization package based on the previous results. The fifth task requires the appropriate officials to make a risk determination and acceptance by reviewing the reported security

Technical Attacks considered one of the most challenging problems that E-commerce should face. The responsible for these attacks typically target sites such as banks, credit card payment gateway. (McDowell, 2009)

Information security professional’s job is to deploy the right safeguards, evaluating risks against critical assets and to mitigate those threats and vulnerabilities. Management can ensure their company’s assets, such as data, remain intact by finding the latest technology and implementing the right policies. Risk management focuses on analyzing risk and mitigating actions to reduce that risk. Successful implementation of security safeguards depends on the knowledge and experience of information security staff. This paper addresses the methods and fundamentals on how to systematically conduct risk assessments on the security risks of information systems.

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.

The internet has been a wide usage in all the fields in the present competitive world. It is being used in the education, research, business and what not, in everything. But providing security for the users information or transactions or any other data in any of the field has become a paramount. This paper gives a vivid picture of “E-commerce” and the vulnerabilities they are facing in providing a secure system for the users. In other words, how the security attacks are made either by the hackers or the intruders, the ways how they attack and exploit to illegitimate means.

trying to access his/her data. The concerned organization or the business group has to make sure that the person trying to access is the right user of the data and care must be taken in such a way that the resources are not used for the wrong purposes. Making use of the correct resources by the right person in a right way is the purpose behind the authentication. A customer is mainly concerned

During the early 1960’s, E-Commerce businesses conducted electronic transactions via primitive computer networks” but the way these transactions were exchanged provided little to no security(34).This made online transactions on WWW(World Wide Web), not reliable and unsecured making consumers eager to not take the chance of risking their information, on an unprotected system. During the early 1960’s came “Electronic Data Interchange(EDI). EDI replaced traditional mailing and faxing of documents with a digital transfer of data from one computer to another”.(35)This was the first step toward the E-Commerce that is present today.Then the influential SSL protocol would come to be which helped to improve the state of security on the WWW. This led to more protocols being introduced, leading to other detrimental protocols such as (3D Secure, TLS, SET). These protocols, that were just mentioned are still widely used today. This paper will go over the threats and the solutions of E-Commerce security.

E-commerce has become most preferred and most convenient way of doing business in the 21st century. The popularity of e-commerce has gone viral in the last couple of decades and everyone thinks of nothing else besides e-commerce. Buying and selling goods and services online have, indeed, revolutionized commerce and the way of doing business. The great benefits of e-commerce have come with lots of security challenges, especially security that pertains personal information. E-commerce exhibits one of the major security concerns to the customers through their daily transactions of purchases and payments to the same. Currently, security and privacy and security are a key concern for most electronic technologies. Essentially, applications of web e-commerce that handle payments as electronic transactions and online banking or using credit cards, debit cards and PayPal among others are more susceptible to high risks of security concerns. Further, customers are exposed to Trojan horse programs, which can subvert or bypass the basic authorization and authentication mechanisms that are employed in the transactions of e-commerce. Impersonation and identity theft are other security issues with e-commerce that should concern both e-commerce providers and clients. The increased popularity of e-commerce and online business, and payment transaction has led to the emergence of security concerns, especially those that are concerned with personal information, and which require well designed

Apart from the admirable functionality of the site, users should always be concerned about the security issues of the system. The massive increase in the drift of e-Commerce has led to a new generation of associated security threats and thus, the site focuses on major security issues like-