Implementation Of Information Security Policy Research Articles

Information Security Applications in Smart Cities: A Bibliometric Analysis of Emerging Research

This paper aims to analyze the intellectual structure and research fronts in application information security in smart cities to identify research boundaries, trends, and new opportunities in the area. It applies bibliometric analyses to identify the main authors and their influences on information security and the smart city area. Moreover, this analysis focuses on journals indexed in Scopus databases. The results indicate that there is an opportunity for further advances in the adoption of information security policies in government institutions. Moreover, the production indicators presented herein are useful for the planning and implementation of information security policies and the knowledge of the scientific community about smart cities. The bibliometric analysis provides support for the visualization of the leading research technical collaboration networks among authors, co-authors, countries, and research areas. The methodology offers a broader view of the application information security in smart city areas and makes it possible to assist new research that may contribute to further advances. The smart cities topic has been receiving much attention in recent years, but to the best of our knowledge, there is no research on reporting new possibilities for advances. Therefore, this article may contribute to an emerging body of literature that explores the nature of application information security and smart cities research productivity to assist researchers in better understanding the current emerging of the area.

Appling tracking game system to measure user behavior toward cybersecurity policies

<span>Institutions wrestle to protect their information from threats and cybercrime. Therefore, it is dedicating a great deal of their concern to improving the information security infrastructure. Users’ behaviors were explored by applying traditional questionnaire as a research instrument in data collocate process. But researchers usually suffer from a lack of respondents' credibility when asking someone to fill out a questionnaire, and the credibility may decline further if the research topic relates to aspects of the use and implementation of information security policies. Therefore, there is insufficient reliability of the respondent's answers to the questionnaire’s questions, and the responses might not reflect the actual behavior based on the human bias when facing the problems theoretically. The current study creates a new idea to track and study the behavior of the respondents by building a tracking game system aligned with the questionnaire whose results are required to be known. The system will allow the respondent to answer the survey questions related to the compliance with the information security policies by tracking their behavior while using the system.</span>

The main trends of cybercrime in the quarantine period and counteraction to it

The article analyzes the latest trends in cybercrime during the introduction and implementation of quarantine measures in connection with the spread of the COVID-19 pandemic in the world and the consequences of this type of crime. Such trends include: a significant increase in the number of cybercrimes in the world and in Ukraine; «exploitation» by criminals of people's concerns about the situation with the coronary crisis and its negative consequences, as a result of which the whole array of these crimes somehow correlates with the pandemic; expanding the objects of cyberattacks and shifting the emphasis on how to «more effectively» interfere in the work of information and communication devices; the emergence of the so-called pandemic offender; creating a serious threat from cybercriminals to the health sector, etc. The whole array of cybercrimes is divided into offenses, in the «scenario» of which the coronavirus theme is decisive, and «traditional» cybercrimes, the committing of which is not directly conditioned by this event, although the number of such crimes (increasing) correlates with special pandemic conditions. The article presents the reasons that led to the emergence of a new phenomenon in the criminal world – a pandemic criminal, whose illegal behavior is manifested primarily in the information space. The danger of cybercrime for the lens of critical infrastructure is emphasized, with special emphasis on medical facilities. The conceptual idea of ​​counteracting cybercrime is revealed, which consists in changing the strategy of counteracting cyber threats from «traditional» offensive to defensive, in which the priority should be given to the protection of information from possible threats. This is due to many factors, including the modern format of communication, the nature of production processes and business, blurring the boundaries between corporate and personal information and communication devices, the dependence of information security on the human factor, the need to find additional sources for information security. The content of the defense strategy of counteraction will determine the strategic directions of this counteraction. The main directions of the defense strategy are: 1) development and implementation of information security policy as individual subjects of the information space, and society, the state as a whole; 2) information education on topics that are most often exploited by criminals during epidemics, pandemics and other natural and social cataclysms, and specific information security measures; 3) development of the market of information security outsourcing services; 4) formation of skills of observance of information hygiene of ordinary citizens in cyberspace; 5) constant monitoring and research of problems of digitalization of society; etc.

Smart City Development in Taiwan: From the Perspective of the Information Security Policy

A smart city is developed through the Internet of Things (IoT), cloud computing, big data, mobile Internet, and other new generation technologies regarding information and communication, and data resources in various fields are integrated and applied. The issue of information security in the network era is the strategic focus, as well as the focus of people’s attention, during Taiwan’s smart city construction. Information security policies are the information security guidelines for organizations, and are key to the organization’s information security performance; moreover, such policies show the organization’s support and commitment to the information security of smart cities. This paper discusses the model of information security policy in Taiwan’s smart cities, uses Path Analysis to explore the characteristics of information security policy in smart cities, and examines the relationship between the formulation, implementation, maintenance, and effectiveness of information security policies. Furthermore, this study examines the impact on the effectiveness of organizational information security policies and information security performance from the following aspects: The length of information security policy publication time, policy review, policy advocacy, employee compliance, fair law enforcement, etc., which are all concrete manifestations of the formulation, implementation, and maintenance of information security policy models. Through a questionnaire survey, the correlation between various assumptions, as well as the relationship between organizational information security characteristics, information security policies, and the effectiveness of information security, are verified one by one during the implementation of information security policies. Finally, conclusions and implications are put forward.

Gestão de segurança da informação: práticas utilizadas pelas instituições federais de ensino superior para implantação de política de segurança da informação

Federal Institutions of Higher Education develop their academic and administrative activities based on their Planning. Each institution develops its rules of conduct that must be carried out by its information and communication security policies. However, in the last Survey of IT Governance in 2014, prepared by the Federal Audit Court, it was reported that only 51% of the Federal Public Administration fully adopted the security policy of information and communication. Considering that there are recommendations and guidelines of the Federal Government to institutionalize this policy in all organs of the Federal Public Administration, both direct and indirectly, this research aimed to identify the scenario where the Federal Higher Education Institutions regarding the existence and practices used to the design and implementation of information and communication security policy. The inductive method with a quantitative approach and documentary procedure was used, and a field study survey as data collection tool involving all federal institutions of higher education in Brazil was applied. At the end of the survey it was realized that the human factor is the most critical factor for success in the planning of Information Security Policy, especially the participation of the High Management. The research has shown the need to promote strategic actions of information security processes in government organizations, especially the Federal Institutions of Higher Education, concerning the implementation of Information Security Policy.

Fatores que Influenciam a Predisposição em Seguir uma Política de Segurança da Informação em uma Instituição de Ensino Superior

Information is a strategic resource for organizations. Academic studies and market researches showed that the information has protective tools violated in higher degree by employees than by external threats, which demand implementation of Information Security Policy to ensure confidentiality, integrity and availability. This study aims to investigate extrinsic and intrinsic motivators that affect student readiness to comply with security policy which will proposed by university. In the literature review were discussed the issues of information security and deterrence theory together with behavioral factors that influence individual readiness. Therefore, was applied a survey with 18 items in Likert scale concordance, with five points, that focused in readiness factors. The research method is composed of quantitative techniques, being: factorial analysis, cluster and logistic regression. The results showed that sample was fragmented in two groups: higher readiness and smaller readiness to follow security policy. In conclusion, it evidenced that severity of punishment has the most influence on user’s readiness.

Validity of information security policy models

Validity is concerned with establishing evidence for the use of a method to be used with a particular set of population. Thus, when we address the issue of application of security policy models, we are concerned with the implementation of a certain policy, taking into consideration the standards required, through attribution of scores to every item in the research instrument. En today's globalized economic scenarios, the implementation of information security policy, in an information technology environment, is a condition sine qua non for the strategic management process of any organization. Regarding this topic, various studies present evidences that, the responsibility for maintaining a policy rests primarily with the Chief Security Officer. The Chief Security Officer, in doing so, strives to enhance the updating of technologies, in order to meet all-inclusive business continuity planning policies. Therefore, for such policy to be effective, it has to be entirely embraced by the Chief Executive Officer. This study was developed with the purpose of validating specific theoretical models, whose designs were based on literature review, by sampling 10 of the Automobile Industries located in the ABC region of Metropolitan São Paulo City. This sampling was based on the representativeness of such industries, particularly with regards to each one's implementation of information technology in the region. The current study concludes, presenting evidence of the discriminating validity of four key dimensions of the security policy, being such: the Physical Security, the Logical Access Security, the Administrative Security, and the Legal & Environmental Security. On analyzing the Alpha of Crombach structure of these security items, results not only attest that the capacity of those industries to implement security policies is indisputable, but also, the items involved, homogeneously correlate to each other.