Crying for the Moon? - Current Challenges in Corporate Information Security Management

In the Fourth Industrial Revolution era, data-based business management activities among enterprises proliferated are mainly based on digital transformation. In this change, the information security system and its operation are emphasized as essential business activities of enterprises the research aims to verify the relationship among the influence factors of corporate information security management based on the TOE framework. This study analyzes the effects of technical, organizational, and environmental factors on the intention, strengthening, and continuity of information security management. To this, a survey was conducted on professional individuals who are working in areas related to information security in organizations, and 107 questionnaires were collected and analyzed. According to major results of the analysis on adopted hypotheses. In results, as to the intention of information security management, organization and environment factors were influential. In the other side, technology and environment factors were affected to the strengthening of information security management. Hence this study pointed out that the environmental factors are most significant for the information security administration of an organization. In addition, it turned out that the strengthening of information security management was influential on the continuity of information security management more significantly than the intention of information security management.

Download Full-text

A Corporate Employee as a Subject of Corporate Information Security Management

Scientific and Technical Information Processing ◽

10.3103/s0147688220020069 ◽

2020 ◽

Vol 47 (2) ◽

pp. 113-118

Author(s):

L. V. Astakhova

Keyword(s):

Information Security ◽

Security Management ◽

Information Security Management ◽

Corporate Information

Download Full-text

Corporate information security management

New Library World ◽

10.1108/03074809910285888 ◽

1999 ◽

Vol 100 (5) ◽

pp. 213-227 ◽

Cited By ~ 14

Author(s):

Ruth C. Mitchell ◽

Rita Marcella ◽

Graeme Baxter

Keyword(s):

Information Security ◽

Security Management ◽

Security Measures ◽

Electronic Information ◽

Security Risks ◽

Information Security Management ◽

Security Breaches ◽

Telephone Interviews ◽

It Department ◽

Corporate Information

To ensure business continuity the security of corporate information is extremely important. Previous studies have shown that corporate information is vulnerable to security attacks. Companies are losing money through security breaches. This paper describes an MSc project that aimed to investigate the issues surrounding corporate information security management. Postal questionnaires and telephone interviews were used. Findings indicate that companies are not proactively tackling information security management and thus are not prepared for security incidents when they occur. Reasons for this lack of action include: awareness of information security threats is restricted; management and awareness of information security is concentrated around the IT department; electronic information is viewed as an intangible business asset; potential security risks of Internet access have not been fully assessed; and surveyed companies have not yet encountered security problems, and therefore are unprepared to invest in security measures. The recommendations include that companies: carry out a formal risk analysis; move information security management from being an IT‐centric function; and alter perceptions towards electronic information so that information is viewed as a valuable corporate asset.

Download Full-text