Information Security Management

2013 ◽  
Vol 3 (3) ◽  
pp. 32-48 ◽  
Author(s):  
José Martins ◽  
Henrique dos Santos ◽  
António Rosinha ◽  
Agostinho Valente

The authors present a Case Study conducted in a Portuguese military organization, to answer the following research questions: (1) what are the most relevant dimensions and categories of information security controls applied in military organizations? (2) What are the main scenarios of information security incidents that are expected to occur? (3) What is the decision process used for planning and selection information security controls? This study reveals that: (1) information security within the military organization is built on the basis of physical and human attack vectors, and targeting the infrastructure that supports the flow of information in the organization; (2) the information security controls applied in the military organization are included in ISO/IEC 27001; (3) planning and selection of applied information security controls are made by decision makers and information security specialists. It appears that specialists impose their planning options essentially seeking to select and retrieve past successful information security cases.

2019 ◽  
Vol 3 (2) ◽  
pp. 109
Author(s):  
Johan Stevens ◽  
Janjaap Semeijn ◽  
Cees Johannes Gelderman

Purpose: This study focusses on the coordination required between military and non-military organisations during humanitarian disasters. Design / Research methods: An in-depth case study was conducted of the disaster relief operation after hurricane Matthew on Haiti in October 2016. We investigated the support of the Dutch military organization and its coordination with the non-military relief organizations. We examined coordination issues at operational, tactical, and strategic levels. Findings: The study shows that no coordination problems occurred at operational level. At the tactical level, cultural differences between military and non-military organizations resulted in coordination problems and deviant perspectives on urgency. At the strategic level, there was a disagreement between the Dutch Ministry of Foreign Affairs and the Dutch Ministry of Defence regarding the Oslo Guidelines. A minority agreed that the guidelines actually apply to military organizations during disaster relief operations. Practical implications: The coordination between the military organization and the non-military relief organization during disaster relief operations can be improved by promoting common and mutual respect and defining a clear tasks and role fulfilments. A first step to improve the coordination is to get familiarity and clarity on the Oslo Guidelines. Another step for improvement is for the military organization to accept that it has no leading but an assistance role during disaster relief operations. Research limitations/implications: A single case study limits the external validity of the results, although useful insights were gained. Future research could address the role of the Oslo Guidelines during disaster relief operations. Are these guidelines still valid, should they be updated, and are the sufficiently known by all relief organizations, including the military? Originality/value of the article: The world is faced with an increasing occurrence of disasters affecting human lives. More lives could be saved when military and non-military organizations would work together more effectively. This is one of the first studies to explore the terms of engagement at the start of relief operations.


2019 ◽  
Vol 11 (7) ◽  
pp. 162 ◽  
Author(s):  
Nikolaos Serketzis ◽  
Vasilios Katos ◽  
Christos Ilioudis ◽  
Dimitrios Baltatzis ◽  
Georgios Pangalos

The complication of information technology and the proliferation of heterogeneous security devices that produce increased volumes of data coupled with the ever-changing threat landscape challenges have an adverse impact on the efficiency of information security controls and digital forensics, as well as incident response approaches. Cyber Threat Intelligence (CTI)and forensic preparedness are the two parts of the so-called managed security services that defendants can employ to repel, mitigate or investigate security incidents. Despite their success, there is no known effort that has combined these two approaches to enhance Digital Forensic Readiness (DFR) and thus decrease the time and cost of incident response and investigation. This paper builds upon and extends a DFR model that utilises actionable CTI to improve the maturity levels of DFR. The effectiveness and applicability of this model are evaluated through a series of experiments that employ malware-related network data simulating real-world attack scenarios. To this extent, the model manages to identify the root causes of information security incidents with high accuracy (90.73%), precision (96.17%) and recall (93.61%), while managing to decrease significantly the volume of data digital forensic investigators need to examine. The contribution of this paper is twofold. First, it indicates that CTI can be employed by digital forensics processes. Second, it demonstrates and evaluates an efficient mechanism that enhances operational DFR.


Author(s):  
LJUBICA JELUŠIČ ◽  
JULIJA JELUŠIČ JUŽNIČ ◽  
JELENA JUVAN

Povzetek Prispevek predstavlja zgodovinski pregled odnosa med vojaško družino in vojaško organizacijo, od prepovedi, zanikanja in nadzora do vključitve v vojaško skupnost. Prelomnica v obravnavanju družine je prehod na poklicno popolnjevanje, ko postane lojalnost družine do vojske bistvena za pridobivanje in zadrževanje vojaškega osebja. Hkrati je vojaška družina postala zanimiva vojaškosociološka tematika raziskovanja, tako v kontekstu sociološkega koncepta požrešnih institucij kot v dihotomiji ravnotežja med delom in življenjem. Vojske, ki so nastajale na slovenskih tleh skozi zgodovino, so sledile svetovnim trendom glede obravnave družin, slovenski vojaški sociologi pa so prispevali pomemben delež spoznanj o slovenskih vojaških družinah h globalnim vojaškosociološkim dosežkom. Ključne besede Vojaška družina, zgodovina odnosa med družino in vojsko, celostna skrb za pripadnike SV, raziskovanje vojaških družin v vojaški sociologiji. Abstract This article presents the history of relations between the military family and the military organization, which have varied from forbiddance, to ignorance, regulation, and finally to inclusion in the military community. The turning point appeared at a time of introducing all volunteer force when the loyalty of families towards the military became important for recruitment and retention of service members. This was also the moment for military sociology to discover the military families as interesting to deploy the general sociological concepts of greedy institutions, work-life balance, negotiation between military and family, etc. The militaries in Slovenian territory followed these trends. Slovenian military sociologists contributed an important part of the knowledge of Slovenian military families to global social science achievements. Key words Military family, history of relations between military and family, comprehensive care for service members of the SAF, the research of military families in military sociology.


2017 ◽  
Vol 7 (4) ◽  
pp. 165
Author(s):  
Nani Kusmiyati ◽  
Hady Efendy

The rapid development of the globalization era demands that the role of a female soldier within the organization of the Indonesian National Army (TNI) succeeds in touching the historical, cultural, social and political aspects prevailing within the Unitary State of the Republic of Indonesia (NKRI). In accordance with the expectations of R.A. Kartini in fighting for gender equality for woman in Indonesia. In military organizations, TNI women must always be able to balance their role as soldiers, wives and mothers for children. On the other hand as TNI women should be able to carry out its duties and responsibilities as a fortress in maintaining the sovereignty of NKRI. Assignment as a TNI woman must be able to compete with other men of TNI. Equality of degrees causes the TNI women to be given the widest opportunity to occupy important positions in the military, including: Commander of the vessel, pilot, diver and other abilities owned by TNI women. In some cases TNI women may be involved in special assignments, such as: UN forces, social activities in mass health and non-structural TNI assignments. Based on the above description will be explained about the insights relating to the leadership of TNI women in military organizations in general, strategy and implementation of the TNI woman leadership style so that it can deliver to the position in the military organization.


2019 ◽  
Vol 33 (1) ◽  
pp. 29-49 ◽  
Author(s):  
Giorgio Gabrielli ◽  
Vincenzo Russo ◽  
Andrea Ciceri

Purpose The uncertainty of the current economic environment increases the risk of organizational failure. The traditional approach intends the crisis as a phenomenon that can be managed according to some predetermined and well-defined procedures. Although this traditional approach emphasizes on the technical dimension, it does not take into account the organizational dimension, which instead plays a crucial role in the circumstances of today’s crisis. The purpose of this paper is to investigate which are the most effective organizational practices able to promote an adequate culture prevent or manage effectively crisis situations. Design/methodology/approach A group of Italian military and civil opinion leaders took part in the study. Authors hypothesized that the military organizations, being defined as “High Reliability Organization,” have organizational characteristics that allow them to manage crisis situations more effectively, and, for this reason, they can be taken as a reference by civil organizations. Findings The results show noticeable differences about organizational attributes concerning the two organizations. According to the results, military organization has the most appropriate organizational dimensions to prevent and manage the crisis situations. Practical implications Based on the results, military organization is suggested to be taken as an example by civil organizations in the process of organizational change necessary to obtain reliable performance. Originality/value The originality of this paper lies in the empirical and theoretical framework provided to analyze risk and crisis management, based on the comparison between military and civil organizations. The paper aims to be a starting point from which a positive process of cultural osmosis between the two organizations can be promoted.


Author(s):  
Mumtaz Karatas ◽  
Ertan Yakıcı ◽  
Nasuh Razi

In the past decades, facility location problems have attracted much attention among researchers and practitioners from different disciplines. Among those problems, location models observed in military organizations have significant impact to the performance of the military organization since they require large amounts of money, resource, and people. Moreover, an efficient planning of military resources often leads to a good direction to victories. In this chapter, considering a number of selected papers, the authors give a brief survey of facility location models and solution techniques employed for military organizations. After providing the features of core location models, they analyze the military facility location models with respect to the context they are handled. After categorizing the articles with respect to the formulations and solution approaches employed, the authors highlight potential issues for further research.


2019 ◽  
Vol 33 (1) ◽  
pp. 50-65
Author(s):  
Giorgio Gabrielli ◽  
Vincenzo Russo ◽  
Andrea Ciceri

Purpose The uncertainty of the current economic environment increases the risk of organizational failure. The traditional approach intends the crisis as a phenomenon that can be managed according to some predetermined and well-defined procedures. Although this traditional approach emphasizes on the technical dimension, it does not take into account that organizational dimension, which instead plays a crucial role in the circumstances of today’s crisis. The purpose of this paper is to investigate which are the most effective organizational practices able to promote an adequate culture prevent or manage effectively crisis situations. Design/methodology/approach A group of Italian military and civil opinion leaders took part in the study. Authors hypothesized that the military organizations, being defined as “High Reliability Organization,” have organizational characteristics that allow them to manage crisis situations more effectively, and, for this reason, they can be taken as a reference by civil organizations. Findings The results show noticeable differences about organizational attributes concerning the two organizations. According to the results, the military organization has the most appropriate organizational dimensions to prevent and manage the crisis situations. Originality/value The originality of this paper lies in the empirical and theoretical framework provided to analyze risk and crisis management, based on the comparison between military and civil organizations. The paper aims to be a starting point from which a positive process of cultural osmosis between the two organizations can be promoted.


Author(s):  
Angel R. Otero ◽  
Abdel Ejnioui ◽  
Carlos E. Otero ◽  
Gurvirender Tejay

In an era where dependence of information systems is significantly high, the threat of incidents related to information security that could jeopardize the information held by is becoming critical. Alarming facts within the literature point to inadequacies in information security practices, particularly the evaluation and prioritization of information security controls in organizations. Research efforts have resulted in various methodologies developed to deal with the ISC assessment problem. A closer look at these traditional methodologies highlights various weaknesses that can prevent effective assessments of information security controls in organizations. This research proposes a novel approach using Grey Relational Analysis to quantify the importance of each information security control taking into account organizations’ goals and objectives. Through a case study, the approach is proven successful in providing a way for measuring the quality of information security controls based on multiple application-specific criteria.


2019 ◽  
Vol 8 (2019) ◽  
pp. 16-27
Author(s):  
Delphine Resteigne ◽  
Philippe Manigart

Abstract The article analyses how the boundaries of postmodern military organizations are changing and how these evolutions affect their relations with the civilian society. The case of the Belgian Defence and the deployment of its military personnel in the streets are used as a case study to illustrate this transformation. Since January 2015, in response to the imminent terrorist threat in Belgium, military units have been deployed in support of the police to monitor sensitive areas, guard buildings and patrol the streets. The article analyses, first, how the population reacted to these new “proximity” roles and, second, the impact of these homeland deployments on the expeditionary readiness of the Belgian Defence and its capacity to carry out its primary missions. The empirical analyses are, based on several quantitative and qualitative surveys, carried out among the Belgian population and the personnel of the Belgian Defence. In particular, the impact of the evolution of the public’s support over time on the blurring of the traditional roles of the military and the use of the military for internal security tasks is analysed.


Author(s):  
Jaime Santos-Reyes ◽  
Tatiana Gouzeva

The chapter presents some aspects of the seismic risk communication within a systemic disaster management system (SDMS) model. Information and communication technology (ICT) plays a key part in managing natural disasters. An example of seismic risk preparedness for the case of preparatory schools in Mexico City has been used to illustrate this feature of the model. Some conclusions are (1) the model has shown the potentiality to the understanding of the flow of information amongst they key subsystems of the model. It can also be used to any natural hazard management. Regarding the case study, (2) 52% of the participants are not sure whether the key decision makers are concern regarding the level of preparedness of the students for the case of earthquakes; (3) 44.1% of the students considered the best way to learn more on earthquakes was through “civil protection” courses; (d) finally, the actions that the decision makers could take are the implementation of seismic risk courses that should be run by civil protection and to promote the culture of preparedness on seismic risk.


Sign in / Sign up

Export Citation Format

Share Document