scholarly journals Information Security: Theoretical and Applied Aspects

2021 ◽  
pp. 183-191
Author(s):  
А.Н. Сухов
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Cyber Security ◽  
Security Policy ◽  
Applied Research ◽  
Negative Effects ◽  
Relevant Issue ◽  
Information Platform ◽  
External Threats ◽  
Technology Addiction

В статье раскрывается актуальность исследования информационной безопасности, а также рассматриваются внешние и внутренние угрозы для ее обеспечения, анализируются возникающие сложности. С данным видом безопасности связана позитивная модель развития общества, поэтому не случайно наиболее важной задачей является создание полноценной теории информационной безопасности. Без этого невозможно вести речь об эффективном устранении ряда негативных последствий информатизации общества. Важной задачей является обеспечение защиты личности и общества в целом от информационно-психологических, деструктивных угроз, в том числе преодоление интернет- и других видов информационной зависимости. Теория информационной безопасности — составная часть социальной психологии безопасности. Для ее полного оформления предстоит еще немало сделать как в теоретическом, так и прикладном плане. Прежде всего имеется в виду создание национальной информационной платформы. В настоящее время существует настоятельная потребность в развитии компетентности в области информационной безопасности не только среди профессионалов, но и различных групп населения. The article focuses on a relevant issue of investigating information security. It treats internal and external threats that affect information security and problems that are associated with information security retention. Effective information security policy is a prerequisite for efficient social development, therefore it is essential to develop a full-fledged information security theory, otherwise it is impossible to efficiently eliminate negative effects of community informatization. It is essential to ensure information security of an individual and society, to protect people and community from destructive informational and psychological threats, to help people overcome their internet addiction and other disorders related to information technology addiction. Information security theory is a branch of social security psychology. It requires a lot of theoretical and applied research. The creation of a nationwide information platform is the first step to make. Nowadays there is an urgent necessity to improve information security competence of both cyber security specialists and laymen.

scholarly journals Validity of information security policy models

2004 ◽  
Vol 16 (3) ◽  
pp. 263-274 ◽  
Author(s):  
Joshua Onome Imoniana
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Security Policy ◽  
Chief Executive ◽  
Theoretical Models ◽  
Information Security Policy ◽  
Security Officer ◽  
Continuity Planning ◽  
Policy Models ◽  
Inclusive Business

Validity is concerned with establishing evidence for the use of a method to be used with a particular set of population. Thus, when we address the issue of application of security policy models, we are concerned with the implementation of a certain policy, taking into consideration the standards required, through attribution of scores to every item in the research instrument. En today's globalized economic scenarios, the implementation of information security policy, in an information technology environment, is a condition sine qua non for the strategic management process of any organization. Regarding this topic, various studies present evidences that, the responsibility for maintaining a policy rests primarily with the Chief Security Officer. The Chief Security Officer, in doing so, strives to enhance the updating of technologies, in order to meet all-inclusive business continuity planning policies. Therefore, for such policy to be effective, it has to be entirely embraced by the Chief Executive Officer. This study was developed with the purpose of validating specific theoretical models, whose designs were based on literature review, by sampling 10 of the Automobile Industries located in the ABC region of Metropolitan São Paulo City. This sampling was based on the representativeness of such industries, particularly with regards to each one's implementation of information technology in the region. The current study concludes, presenting evidence of the discriminating validity of four key dimensions of the security policy, being such: the Physical Security, the Logical Access Security, the Administrative Security, and the Legal & Environmental Security. On analyzing the Alpha of Crombach structure of these security items, results not only attest that the capacity of those industries to implement security policies is indisputable, but also, the items involved, homogeneously correlate to each other.

scholarly journals VIRTUAL REALITY: U.S. INFORMATION SECURITY THREATS CONCEPT AND ITS INTERNATIONAL DIMENSION

2014 ◽  
pp. 128-136
Author(s):  
E. V. Batueva
Keyword(s):  
United States ◽  
Information Security ◽  
Cyber Security ◽  
Security Policy ◽  
The United States ◽  
Main Task ◽  
Security Issues ◽  
Cyber Space ◽  
National Information ◽  
The U.S

The development of ICT and the formation of the global information space changed the agenda of national and international security. Such key characteristics of cyberspace as openness, accessibility, anonymity, and identification complexity determined the rise of actors in cyber space and increased the level of cyber threats. Based on the analyses of the U.S. agencies' approach, the author defines three major groups of threats: use of ICT by states, criminals and terrorists. This concept is shared by the majority of the countries involved in the international dialogue on information security issues and is fundamental for providing cyber security policy on both national and international levels. The United States is developing a complex strategy for cyber space that includes maximization of ICT's advantages in all strategically important fields as well as improvement of national information systems and networks security. On the international level the main task for the American diplomacy is to guarantee the U.S. information dominance. The United States is the only country that takes part practically in all international and regional fora dealing with cyber security issues. However process of the development of a global cyber security regime is not going to be fast due to countries' different approaches to key definitions and lack of joint understanding of cyber security issues as well as due to the position of the countries, among all the United States, that are not interested in any new obligatory international norms and principles. Such American policy aims at saving the possibility of using cyberspace capacity in reaching political and military goals, thus keeping the global leadership.

scholarly journals Desain dan Implementasi Standar Operasional Prosedur (SOP) Keamanan Sistem Informasi Fakultas Teknik Universitas Diponegoro Menggunakan Standar ISO 27001

2015 ◽  
Vol 3 (3) ◽  
pp. 387
Author(s):  
Penji Prasetya ◽  
Adian Fatchur Rochim ◽  
Ike Pertiwi Windasari
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Security Policy ◽  
Qualitative Methodology ◽  
Standard Operating Procedures ◽  
Final Project ◽  
Security Controls ◽  
Standard Operating ◽  
Initial Objective ◽  
Iso 27001

Like today's modern era, information technology is needed to support the business processes of the organization. In the use of information technology organization must have policies and standard operating procedures are good that any work carried out in the appropriate direction of the organization. Not only that, the organization must also pay attention to information security of any assets owned. This final project aims to make policies and standard operating procedures (SOP) and assessing the information security risk in the assets of the organization. In the process of this skripsi refers to the standard of ISO 27001 as the standard for information security management and use of qualitative methodology, where qualitative methodology is a methodology that produces descriptive data in the form of words written or spoken of people and behaviors that can be observed. This final project resulted in the level of risk that is contained in the value of assets and generate recommendations to improve the security controls in the information security of assets based on the clauses of ISO 27001. In accordance with the initial objective of this final project also produce information security policy document and document information security standard operating procedures.

Information Availability

2009 ◽  
pp. 230-239 ◽  
Author(s):  
Deepak Khazanchi
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Security Policy ◽  
Second Order ◽  
Business Continuity ◽  
It Infrastructure ◽  
Information Availability ◽  
Policies And Procedures ◽  
Concept Of Information

This chapter describes the concept of information availability (IAV) which is considered an important element of information security. IAV is defined as the ability to make information and related resources accessible as needed, when they are needed, where they are needed. In the view of the authors, this notion encompasses more than just making sure that the information technology (IT) infrastructure is technically adequate and continuously available, but it also emphasizes other often-ignored attributes of IAV, such as appropriate policies and procedures, an effective security policy, and the establishment of a workable business continuity plan. Thus, the goal of the chapter is to define IAV in the context of information security and elaborate on each of these first and second order determinants of information availability.

ФЕНОМЕН ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ

2020 ◽  
Author(s):  
Д. Ш. Цырендоржиева ◽  
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Information Society ◽  
Point Of View ◽  
Negative Effects ◽  
Core Component ◽  
Technology System ◽  
Philosophical Foundations ◽  
General Scientific ◽  
Information Technology System

The monograph reveals the main provisions of the theories of the information society from the point of view of the safe use of information technology. System- atic negative effects, the dangers, the threat of the use of information technology, highlighted the key areas of information security as a core component of national security. A system of social measures to ensure information security, laying the socio-philosophical foundations of the General scientific theory of information se- curity. The publication is intended for all those interested in philosophical issues.

Protective Measures and Security Policy Non-Compliance Intention

2019 ◽  
Vol 31 (1) ◽  
pp. 1-21 ◽  
Author(s):  
Kuo-Chung Chang ◽  
Yoke May Seow
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Security Policy ◽  
Negative Relationship ◽  
Protection Motivation Theory ◽  
Protective Measures ◽  
Insider Threats ◽  
Perceived Severity ◽  
Arduous Task ◽  
The Relationship

Internal vulnerabilities and insider threats top the list of information security (InfoSec) incidents; prompting organizations to establish InfoSec policy (ISP). Yet, mitigating user's ISP non-compliance is still an arduous task. Hence, this study aims to minimize user's ISP non-compliance intention by investigating their perception and attitude toward ISP non-compliance. Specifically, protective measures drawing upon the protection motivation theory - perceived severity of ISP non-compliance, rewards and familiarity with ISP - analyze users' attitude toward ISP non-compliance. Further, the new construct, information technology (IT) vision conflict, is the mismatch between the values that users hold and those embedded in the ISP. The misalignment of the two conflicting values moderates the relationship between the protective measures and attitude toward ISP non-compliance. Findings show that IT vision conflict weakens the negative relationship between perceived severity of ISP non-compliance and attitude toward ISP non-compliance; indirectly affecting ISP non-compliance intention.

scholarly journals Productivity vs security: mitigating conflicting goals in organizations

2017 ◽  
Vol 25 (2) ◽  
pp. 137-151 ◽  
Author(s):  
Peter Mayer ◽  
Nina Gerber ◽  
Ronja McDermott ◽  
Melanie Volkamer ◽  
Joachim Vogt
Keyword(s):  
Information Security ◽  
Goal Setting ◽  
Security Policy ◽  
Negative Effects ◽  
Content Type ◽  
Factors Affecting ◽  
Positive Effects ◽  
Survey Results ◽  
Security Compliance ◽  
Reported Data

Purpose This paper aims to contribute to the understanding of goal setting in organizations, especially regarding the mitigation of conflicting productivity and security goals. Design/methodology/approach This paper describes the results of a survey with 200 German employees regarding the effects of goal setting on employees’ security compliance. Based on the survey results, a concept for setting information security goals in organizations building on actionable behavioral recommendations from information security awareness materials is developed. This concept was evaluated in three small- to medium-sized organizations (SMEs) with overall 90 employees. Findings The survey results revealed that the presence of rewards for productivity goal achievement is strongly associated with a decrease in security compliance. The evaluation of the goal setting concept indicates that setting their own information security goals is welcomed by employees. Research limitations/implications Both studies rely on self-reported data and are, therefore, likely to contain some kind of bias. Practical implications Goal setting in organizations has to accommodate for situations, where productivity goals constrain security policy compliance. Introducing the proposed goal setting concept based on relevant actionable behavioral recommendations can help mitigate issues in such situations. Originality/value This work furthers the understanding of the factors affecting employee security compliance. Furthermore, the proposed concept can help maximizing the positive effects of goal setting in organizations by mitigating the negative effects through the introduction of meaningful and actionable information security goals.

scholarly journals Information security policy in the systems of information and analytical maintenance for support of organizational decisions

2016 ◽  
pp. 097-103
Author(s):  
S.M. Churubrova ◽  
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Security Policy ◽  
Information Resources ◽  
Technology Support ◽  
Information Security Policy ◽  
General Rules ◽  
Information Technology Support ◽  
And Control ◽  
Information Objects

This article describes an information security policy in systems of support of organizational decisions. It defines the basic requirements for the protection of information objects, information resources and features of functioning Intellectual information technology support organizational decisions are described. The general rules and regulations separation and control access based on ABAC model are developed.

scholarly journals Analisis Keamanan Informasi Menggunakan Tools Indeks Kami ISO 4.1

2021 ◽  
Vol 2 (2) ◽  
pp. 78-86
Author(s):  
Ade Kornelia ◽  
Dedi Irawan
Keyword(s):  
Information Technology ◽  
Information Security ◽  
Information Management ◽  
Applied Research ◽  
Good Information ◽  
Maturity Level ◽  
Certification Process ◽  
International Standard ◽  
Managerial Skills ◽  
Iso 27001

Information is a very valuable asset for a university institution. Utilization of information technology offers various conveniences in obtaining the information needed. Good information management can make universities have good managerial skills. protecting information security means that it also requires efforts to pay attention to the security factors of all supporting assets such as networks, as well as other facilities that are directly or indirectly related to the process of organizing information. Bina Darma University is an institution that is engaged in the field of education and science, which has a vision that is to become an International Standard University Based on Information Technology By 2025, to realize this there are several efforts prepared, one of which is to improve information security by implementing the ISO 27001 certification process. :2013. So in the context of Bina Darma University will implement ISO 27001: 2013. Using the method of Applied Research (applied research) the author took the initiative to conduct research with the title ANALYSIS OF INFORMATION SECURITY USING OUR INDEX TOOLS 4.1 So as to produce Knowing the maturity level of information security with a status of Inappropriate, Needs improvement , Enough and Good at Bina Darma University.

Sign in / Sign up

Export Citation Format

Share Document