Business Cybersecurity Research Articles

Cybersecurity in Business

Cybersecurity is like a digital bouncer, standing guard over your computers, phones, and networks to keep out unwanted visitors. In the bustling digital marketplace, cybersecurity is the lock on your virtual door, protecting your valuable data and privacy from prying hands. Imagine a shield protecting your digital world: that's cybersecurity. It keeps your devices, data, and online life safe from bad guys. In today's tech-driven world, cybersecurity is essential. It's the armor that protects our precious information, from business secrets to private photos, from hackers and other threats

Cybersecurity in Business: A Case Study of DiDi

Big data has substantially improved the efficiency of information collection and processing (Fadhil et al., 2021). (Fadhil, S. A., Kadhim, L. E. and Abdurazaq, S. G. (2021) ‘Protection measurements of computer network information security for big data’, Journal of Discrete Mathematical Sciences and Cryptography, Vol. 24, No. 7, pages 1959–1965, doi: 10. 1080/09720529.2021.1959996). Nevertheless, the transparentizing and openization of information could also increase the risk of disclosure of personal information and business secrets, leading to various illegal and criminal activities (Lim et al., 2018). (Lim, S., Woo, J., Lee, J. and Huh, S. -Y. (2018) ‘Consumer valuation of personal information in the age of big data’, Journal of the Association for Information Science and Technology, Vol. 69, No. 1, pages 60–71, doi: 10.1002/asi.23915). This paper adopts qualitative analysis and single-case study to investigate the approaches and outcomes of network information collection. It is found that many e-commerce platforms utilize big data technologies to collect, screen and process customer information. Yet, the collected customer information might be maliciously used by others to infringe on personal privacy, result in property damage and loss, trigger unhealthy market competition, and hinder economic development (Taylor, 2017). ((Taylor, I. (2017) ‘Data collection, counterterrorism and the right to privacy’, Politics, Philosophy & Economics, Vol. 16, No. 3, pages 326–346, doi: 10.1177/ 1470594X17715249). Thus, this paper recommends that the application of big data should have a legal boundary. It needs to be strictly defined and regulated to facilitate its positive role in protecting cybersecurity and promoting fair market competition. Big data, business secret, cybersecurity, data right, e-commerce platform, information processing, legal boundary, market competition, network platform, personal privacy

The extent of emerging commercial banks commitment to cybersecurity governance: An empirical study

The interest of business organizations and banks in cybersecurity has become extremely important, and this is evident through many studies such as (Abu-Shanab et al., 2013; Al-Muhtadi, 2020) which emphasized the importance of cybersecurity in business. The study aims to identify the extent of the commitment of Jordanian commercial banks to the governance of cybersecurity, from the point of view of a certified public accountant. However, the population consisted of Jordanian commercial banks, and a sample of 83 respondents was taken from auditors who hold a chartered accountant certificate and work in the field of auditing the accounts of Jordanian commercial banks. The findings indicate that Jordanian commercial banks are committed to cybersecurity governance with regard to cybersecurity governance strategy, cybersecurity related to human resources, and cybersecurity risk management from the point of view of a certified public accountant. Nevertheless, this paper contributes to providing useful results for financial managers and accountants working in Jordanian commercial banks by introducing them to the importance of cybersecurity governance. Through its theoretical literature, prior investigations, and research methodologies whose validity and reliability have been proven and may be employed and used in future studies, it is hoped that this study would motivate many researchers to conduct more new research on this subject

GRAMM-LEACH-BLILEY GETS A SYSTEMS UPGRADE: WHAT THE FTC’S PROPOSED SAFEGUARDS RULE CHANGES MEAN FOR SMALL AND MEDIUM AMERICAN FINANCIAL INSTITUTIONS

This paper provides an overview of impending regulatory changes to the long-standing “Safeguards Rule.” The Safeguards Rule, adopted by the U. S Federal Trade Commission (FTC) following the passage of the Gramm-Leach-Bliley Act in 1999, established the very bedrock of business cybersecurity conditions that helped fuel development of the American information economy for two decades. While the Safeguards Rule fostered the emergence of the digital economy, it has begun to show its age. In response to a seemingly endless series of cybersecurity incidents, the FTC has proposed a series of the most sweeping reforms to the American cybersecurity regulatory regime in history. The paper identifies and describes the most impactful of the proposals and examines potential compliance challenges, including significantly increased compliance costs, notably burdensome for small and medium financial firms across the United States.

ICT for Cyber Security in Business

In recent years, the financial value of the stored information repeatedly exceeds the one of the equipment which is needed for its storage. Therefore, the process of business development needs the implementation of up-to-date ICT for data security from cyber-attacks. The scalability of IT infrastructures in this direction leads to development of malware creators. Thus, file servers become inefficient and give away to private clouds. Attacks against data stored on file servers and workstations are becoming more widespread. Standard security methods (for example, backup) are not always secure enough and can also be the target of a cyber-attack if not properly managed. In addition, information from the time of the last backup to the time of attack will be lost. The paper aims to research and propose approaches which can be used for recovery of the information arrays. We consider some software for implementation of private cloud which correspond to the ISO 27001 standard. The methods for accessing data will be analyzed and the techniques by which clouds deal with some of cyber-attacks will be addressed.

Why organisational readiness is vital in the fight against insider threats

A chain is only as strong as its weakest link. It's a well-known phrase, but one that rings particularly true when considering a business's cyber security. In Securonix's 2019 Insider Threat Survey Report, 73% of organisations confirmed that insider attacks are becoming more frequent, and 59% said they think that privileged IT users pose the biggest insider security risk to organisations. 1 Insider threat is on the rise, and it's time for more companies to become aware of the risk they face and prepare correctly. The insider threat is on the rise, and it's time for more companies to become aware of the risk they face and prepare correctly. Organisational readiness is a factor that too many overlook in their pursuit of complete security. The right foundations need to be set before any business can produce a top-drawer security system. Once employees understand the importance of their role in protecting their company and buy into a secure culture, businesses can expect to reap the full benefits of the technology they're installing, argues Mark Rodbert of Idax Identity Analytics.

Evaluating Cybersecurity Theories, Models, Standards and Frameworks

Businesses and organizations around the world are increasingly concerned about cyber security. Understanding the various theories, models, standards and frameworks that underpin current practices is necessary to develop effective cybersecurity strategies. The existing cyber security theories, models, standards and frameworks are assessed in this review paper with a view to comparing their strengths and weaknesses. This paper summarizes findings from a thorough review of relevant peer-reviewed articles and lists key research areas for the coming years. Indeed, the Schwartz theory seems to be promising for improving cybersecurity in business and governance contexts on grounds that it is based upon verifiable observations and factor analysis from data collection. In addition, the Review Paper provides an overview of how different cybersecurity theories, models, standards and frameworks have been implemented in practice as well as highlights their challenges and successes. Finally, there is a summary on key findings and their implications for future cyber security research and practice. Keywords: Cybersecurity, Theories, Models, Standards, Frameworks.

Cybercrime has evolved: it's time cyber security did too

On August 6, 1991 the web went live to the world. At the time, most people didn't even know what the Internet was, let alone imagine what it would come to mean. What was initially a network of static web pages has become an ever-evolving information ecosystem. From streaming media to banking online to turning the lights on in our homes, the web is now an integral part of our daily lives. The Internet has changed the way we communicate and has helped create a global economy. But with great change comes great opportunity – one that malicious hackers have not been slow to exploit. As the Internet, and what we use it for, evolves every day, so do the tools and techniques used by these hackers. And so organisations need to evolve too. There are five key elements that play a part in ensuring the advancement of a business's cyber security strategy: collaboration, assessment, development, application and apprenticeships, says Laura Lee of Circadence.

Human factors in cybersecurity; examining the link between Internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours

The present study explored the relationship between risky cybersecurity behaviours, attitudes towards cybersecurity in a business environment, Internet addiction, and impulsivity. 538 participants in part-time or full-time employment in the UK completed an online questionnaire, with responses from 515 being used in the data analysis. The survey included an attitude towards cybercrime and cybersecurity in business scale, a measure of impulsivity, Internet addiction and a ‘risky’ cybersecurity behaviours scale. The results demonstrated that Internet addiction was a significant predictor for risky cybersecurity behaviours. A positive attitude towards cybersecurity in business was negatively related to risky cybersecurity behaviours. Finally, the measure of impulsivity revealed that both attentional and motor impulsivity were both significant positive predictors of risky cybersecurity behaviours, with non-planning being a significant negative predictor. The results present a further step in understanding the individual differences that may govern good cybersecurity practices, highlighting the need to focus directly on more effective training and awareness mechanisms.