The Roles of IT Strategies and Security Investments in Reducing Organizational Security Breaches

The volume and severity of information security breaches encountered continues to increase as organizations, including healthcare organizations, struggle to identify more effective security policies and procedures. Publicly available guidelines such as GASSP or ISO17799 that are designed to facilitate development of effective security policies and procedures have been criticized for, among other things, inadequate attention to differences in organizational security needs (Baskerville & Siponen, 2002), and for inadequate attention to the social dimensions of security problems (Dhillon & Backhouse, 2001). In this contribution, we argue that the diversity of organizational security needs, as well as the need to recognize the social dimensions to security problems, will continue to grow as companies move away from employing unique, proprietary approaches to software and network development, in favor of adopting standards-based plug-and-play applications, and related standards-based methods and technologies designed to enable interorganizational as well as local systems interoperability.

Download Full-text

Exploring Information Security Risks in Healthcare Systems

Encyclopedia of Healthcare Information Systems ◽

10.4018/978-1-59904-889-5.ch072 ◽

2008 ◽

pp. 573-577 ◽

Cited By ~ 1

Author(s):

Amy Ray ◽

Sue Newell

Keyword(s):

Information Security ◽

Security Policies ◽

Social Dimensions ◽

Healthcare Organizations ◽

Security Risks ◽

Local Systems ◽

Security Breaches ◽

Policies And Procedures ◽

The Social ◽

Organizational Security

The volume and severity of information security breaches encountered continues to increase as organizations, including healthcare organizations, struggle to identify more effective security policies and procedures. Publicly available guidelines such as GASSP or ISO17799 that are designed to facilitate development of effective security policies and procedures have been criticized for, among other things, inadequate attention to differences in organizational security needs (Baskerville & Siponen, 2002), and for inadequate attention to the social dimensions of security problems (Dhillon & Backhouse, 2001). In this contribution, we argue that the diversity of organizational security needs, as well as the need to recognize the social dimensions to security problems, will continue to grow as companies move away from employing unique, proprietary approaches to software and network development, in favor of adopting standards-based plug-and-play applications, and related standards-based methods and technologies designed to enable interorganizational as well as local systems interoperability.

Download Full-text

Information security breaches and IT security investments: Impacts on competitors

Information & Management ◽

10.1016/j.im.2018.11.003 ◽

2019 ◽

Vol 56 (5) ◽

pp. 681-695 ◽

Cited By ~ 8

Author(s):

Christina Y. Jeong ◽

Sang-Yong Tom Lee ◽

Jee-Hae Lim

Keyword(s):

Information Security ◽

It Security ◽

Security Breaches ◽

Security Investments

Download Full-text

How the United States benefits from agricultural and food security investments in developing countries

10.2499/p15738coll2.133419 ◽

2019 ◽

Cited By ~ 1

Author(s):

International Food Policy Research Institute (IFPRI)

Keyword(s):

United States ◽

Developing Countries ◽

Food Security ◽

The United States ◽

Security Investments

Download Full-text

Automated Detection of Pin Defects on Counterfeit Microelectronics

10.31399/asm.cp.istfa2018p0057 ◽

2018 ◽

Author(s):

Pallabi Ghosh ◽

Domenic Forte ◽

Damon L. Woodard ◽

Rajat Subhra Chakraborty

Keyword(s):

Integrated Circuits ◽

Depth Map ◽

Optical Microscope ◽

Automated Detection ◽

Detection Methods ◽

Global Supply Chains ◽

Subject Matter Experts ◽

Security Breaches ◽

The Past ◽

Skilled Subject

Abstract Counterfeit electronics constitute a fast-growing threat to global supply chains as well as national security. With rapid globalization, the supply chain is growing more and more complex with components coming from a diverse set of suppliers. Counterfeiters are taking advantage of this complexity and replacing original parts with fake ones. Moreover, counterfeit integrated circuits (ICs) may contain circuit modifications that cause security breaches. Out of all types of counterfeit ICs, recycled and remarked ICs are the most common. Over the past few years, a plethora of counterfeit IC detection methods have been created; however, most of these methods are manual and require highly-skilled subject matter experts (SME). In this paper, an automated bent and corroded pin detection methodology using image processing is proposed to identify recycled ICs. Here, depth map of images acquired using an optical microscope are used to detect bent pins, and segmented side view pin images are used to detect corroded pins.

Download Full-text

How Bad is it? – A Branching Activity Model to Estimate the Impact of Information Security Breaches

SSRN Electronic Journal ◽

10.2139/ssrn.2233075 ◽

2013 ◽

Cited By ~ 5

Author(s):

Russell Cameron Thomas ◽

Marcin Antkiewicz ◽

Patrick Florer ◽

Suzanne Widup ◽

Matthew Woodyard

Keyword(s):

Information Security ◽

Activity Model ◽

Security Breaches ◽

The Impact

Download Full-text

Security Breaches in the U.S. Federal Government

SSRN Electronic Journal ◽

10.2139/ssrn.2933577 ◽

2017 ◽

Cited By ~ 1

Author(s):

Min-Seok Pang

Keyword(s):

Federal Government ◽

Security Breaches ◽

The U.S

Download Full-text

The Market Value and Reputational Effects from Lost Confidential Information

International Journal of Financial Management ◽

10.21863/ijfm/2015.5.4.020 ◽

2015 ◽

Vol 5 (4) ◽

Cited By ~ 2

Author(s):

Joseph K. Tanimura ◽

Eric W. Wehrly

Keyword(s):

Information Security ◽

Market Value ◽

Direct Costs ◽

Publicly Traded ◽

Confidential Information ◽

Publicly Traded Companies ◽

Security Breaches ◽

Customer Information ◽

Employee Information

According to many business publications, firms that experience information security breaches suffer substantial reputational penalties. This paper examines incidents in which confidential information, for a firms customers or employees, is stolen from or lost by publicly traded companies. Firms that experience such breaches suffer statistically significant losses in the market value of their equity. On the whole, the data indicate that these losses are of similar magnitudes to the direct costs. Thus, direct costs, and not reputational penalties, are the primary deterrents to information security breaches. Contrary to many published assertions, on average, firms that lose customer information do not suffer reputational penalties. However, when firms lose employee information, we find significant reputational penalties.

Download Full-text

Effective Multi-Layer Security for Campus Network

Journal of Communications Technology Electronics and Computer Science ◽

10.22385/jctecs.v2i0.18 ◽

2015 ◽

Vol 2 ◽

pp. 6

Author(s):

Isiaka Ajewale Alimi

Keyword(s):

Network Architecture ◽

Communication Systems ◽

Denial Of Service ◽

High Rate ◽

Campus Network ◽

Security Measures ◽

Security Breaches ◽

Security Technologies ◽

Network Layers ◽

Firewall System

The development in different communication systems as well as multimedia applications and services leads to high rate of Internet usage. However, transmission of information over such networks can be compromised and security breaches such as virus, denial of service, unauthorized access, and theft of proprietary information which may have devastating impact on the system may occur if adequate security measures are not employed. Consequently, building viable, effective, and safe network is one of the main technical challenges of information transmission in campus networks. Furthermore, it has been observed that, network threats and attacks exist from the lower layers of network traffic to the application layer; therefore, this paper proposes an effective multi-layer firewall system for augmenting the functionalities of other network security technologies due to the fact that, irrespective of the type of access control being employed, attacks are still bound to occur. The effectiveness of the proposed network architecture is demonstrated using Cisco Packet Tracer. The simulation results show that, implementation of the proposed topology is viable and offers reasonable degree of security at different network layers.

Download Full-text