An Approach to Assessing Information Security Effectiveness in Control Systems

Many organizations have initiated efforts to manage the security of their information by implementing an Information Security Management System (ISMS). ISMS is a set of guiding principles for managing organization’s confidential information and minimizing risk for business continuity. However, information security remains a major challenge and the effectiveness of ISMS is often argued due to the exposure of organizations to information security threats, incidents, risks, and vulnerabilities. One of the reasons is the unsuccessful ISMS current practices amongst all employees and lack of ISMS awareness in organizations. Several critical success factors are identified from previous studies that lead to the ISMS success. Among the success factors are human, organizational and technical factors. This study explores the factors that contribute to the success of ISMS and identify the organizational factors that relate to the information security effectiveness. The conceptual model is developed and will be tested within the Malaysian Public Sectors (MPS) organizations to provide a preliminary insight, understanding, and clarification of the organizational factors, together with the significant effects on ISMS effectiveness. This study used a quantitative approach and data collected from personnel’s that were directly involved with the ISMS implementation through a questionnaire survey.

Download Full-text

Approach to the Evaluation of the Efficiency of Information Security in Control Systems

Automatic Control and Computer Sciences ◽

10.3103/s0146411620080362 ◽

2020 ◽

Vol 54 (8) ◽

pp. 864-870

Author(s):

P. D. Zegzhda ◽

V. G. Anisimov ◽

P. V. Sem’yanov ◽

A. F. Suprun ◽

E. G. Anisimov ◽

...

Keyword(s):

Information Security ◽

Control Systems

Download Full-text

Systematization of industrial control systems information security threats

10.1063/5.0071576 ◽

2021 ◽

Author(s):

Julia Kuznetsova ◽

Konstantin Sakharov ◽

Igor Salov ◽

Vladislav Kemkin ◽

Boris Doroshenko ◽

...

Keyword(s):

Information Security ◽

Control Systems ◽

Security Threats ◽

Industrial Control ◽

Industrial Control Systems

Download Full-text

ENISA Study

Securing Critical Infrastructures and Critical Control Systems ◽

10.4018/978-1-4666-2659-1.ch005 ◽

2013 ◽

pp. 105-143

Author(s):

Rafal Leszczyna ◽

Elyoenai Egozcue

Keyword(s):

Information Security ◽

Control Systems ◽

Current View ◽

Final Report ◽

European Network ◽

Industrial Control ◽

Industrial Control Systems ◽

International Context ◽

Research Survey

In 2011, the European Network and Information Security Agency (ENISA) conducted a study in the domain of Industrial Control Systems (ICS). Its objective was to obtain the current view on the ICS protection primarily in Europe but also in the international context. The ‘portrait’ included threats, risks, and challenges in the area of ICS protection as well as national, pan European, and international initiatives on ICS security. The study was performed through desktop research, survey and interviews, and a meeting with all involved stakeholders. This chapter highlights the most relevant parts of the final report of the study. It focuses on the challenges to securing ICS identified during the research, but also presents the context and the methodology of the study. In response to the challenges, the seven recommendations of ENISA for protecting ICS are proposed.

Download Full-text

Big Data Analytics Adoption Factors in Improving Information Systems Security

10.4018/978-1-6684-3662-2.ch059 ◽

2022 ◽

pp. 1231-1248

Author(s):

Marouane Balmakhtar ◽

Scott E. Mensch

Keyword(s):

Big Data ◽

Information Systems ◽

Information Security ◽

Data Analytics ◽

Big Data Analytics ◽

Review Of The Literature ◽

Information Systems Security ◽

Systems Security ◽

Security Effectiveness ◽

Research Questions

This research measured determinants that influence the willingness of IT/IA professionals to recommend Big Data analytics to improve information systems security in an organization. A review of the literature as well as the works of prior researchers provided the basis for formulation of research questions. Results of this study found that security effectiveness, organizational need, and reliability play a role in the decision to recommend big data analytics to improve information security. This research has implications for both consumers and providers of big data analytics services through the identification of factors that influence IT/IA professionals. These factors aim to improve information systems security, and therefore, which service offerings are likely to meet the needs of these professionals and their organizations.

Download Full-text