Information Security Awareness Research Articles

Az információbiztonság időszerű kérdései a magyarországi kkv-k körében

Összefoglalás. A tanulmány célja az információbiztonság vizsgálata a magyarországi kis- és középvállalkozások (kkv-k) körében. Tanulmányunk aktualitását az adja, hogy az Európai Unió Bizottsága által évente kiadott Digitális Gazdaság és Társadalom Indexe szerint a magyarországi kkv-kat alacsony adat- és információbiztonsági szint jellemzi. Kutatásunk során egyaránt alkalmaztunk kvalitatív és kvantitatív módszereket. Az előbbinél dokumentumelemzéssel megvizsgáltuk, hogy a hazai szakirodalom milyen fontosabb információbiztonsági kihívásokat azonosít, illetve interjúk segítségével feltérképeztük a kkv-k információbiztonsági gyakorlatait és kihívásait, az utóbbinál pedig egy online, nagymintás kérdőív révén vizsgáltuk a szektor vezetőinek információbiztonsággal kapcsolatos véleményét, fejlettségét. Summary. The aim of the study is to examine information security among small and medium-sized enterprises (SMEs) in Hungary. The relevance of our study is that, according to the Digital Economy and Society Index published annually by the Commission of the European Union, Hungarian SMEs are characterised by a low level of data and information security. In our research, we used both qualitative and quantitative methods. In the former, we conducted a document analysis to identify the main information security challenges identified in the domestic literature and mapped the information security practices and challenges of SMEs through interviews, while in the latter, we used an online, large-scale questionnaire to investigate the views and development of the sector’s managers on information security. The findings of our study are based on the responses of 150 SME managers and 31 IT professionals working in the sector. We divided our questionnaire into six sections: demographics, business profile, device usage, digital habits, information security awareness survey based on the international HAIS-Q, information security awareness in daily practice. In the present research we deviated somewhat from the international model, firstly because we had to adapt the model to the domestic requirements and our research objectives, and secondly because this model was only a part of our questionnaire. During the research we have clearly identified the need to develop and implement practice-oriented training programmes that can help managers and IT professionals in the domestic SME sector to develop their information security awareness and even to make the transition to Industry 4.0. Based on the responses to the interview questions, it can be concluded that, overall, SME managers and their organisations are increasingly starting to build cybersecurity solutions and information security measures around their organisation. There is still a need to develop and share information security good practices that can reach SMEs, as there is a need for training and exchange of experiences, but not all companies are fully committed to the issue, so the actual need for action and organisation is ultimately lagging behind. A small proportion of the organisations surveyed have been victims of a cybersecurity incident and a good proportion of SME managers believe that until an incident has happened to an employee or the organisation, they will not learn from it. Basically, there is a growing demand for increased security and the use of security tools and education in information security, but this is evolving as a slow process and not as fast as the world around us is changing, so it is questionable when an information security explosion will occur that may radically change the tools and attitudes of organisations.

Investigation on information security awareness based on KAB model: the moderating role of age and education level

Purpose This study aims to investigate the moderating role of sociodemographic factors, specifically age and education level, in the knowledge-attitude-behavior (KAB) model concerning information security awareness (ISA) amid growing technological threats. Design/methodology/approach This study uses a survey methodology, collecting data from 400 working individuals in Vietnam, to test the applicability of the KAB model and evaluate the moderating effects of age and education on the model’s established relationships. In addition, the theoretical model and hypotheses were evaluated using the partial least squares structural equation model (PLS-SEM) approach. Findings This research confirms the relationships posited in the KAB model. Notably, it shows that younger employees showcase a more positive attitude and behavior toward information security compared with their older counterparts. In addition, higher education levels strengthen the positive association between information security knowledge and attitude. The findings underscore the imperative for organizations to consider sociodemographic variables when formulating strategies to enhance ISA. Originality/value This study extends the KAB model by exploring the impact of sociodemographic factors, focusing on age and education in ISA. Overcoming the oversight in current literature, particularly in the context of technological threats, the research uses PLS-SEM and targets a specific demographic in Vietnam.

The Role of Digital Media on Students’ Management in Higher Vocational College

This study uses a combination of empirical analysis to conduct a comprehensive analysis of the role of digital media and student management in higher vocational colleges. The results show that the current application status of digital media in student management shows extensive and profound impact. With the rapid development of information technology, digital media has become an important tool for student management in higher vocational colleges, covering many aspects such as course management, attendance management, and student information inquiry, greatly improving management efficiency and convenience. By establishing a digital system, the school has achieved comprehensive coverage of student information management and online education. At the same time, digital media also plays an important role in students' social interaction and has become an indispensable part of students' daily lives. However, digital media applications also bring some problems. Information overload and distraction can make it difficult for students to focus, while security risks threaten student privacy. Solving these problems requires schools to take effective measures, such as improving information literacy and security awareness, and establishing a complete information security system. The impact of digital media on student development is complex and diverse. Its advantage lies in providing a broad learning space and diversified learning methods to promote students' communication and socialization. However, negative effects such as information overload and Internet addiction cannot be ignored. In order to better guide students to use digital media, schools and families need to strengthen digital media literacy education, pay attention to students' mental health, and strengthen network security. In student management, the advantages of digital media are mainly reflected in improving efficiency and interactivity, and promoting management innovation and development. However, the popularization of digital media needs to face issues such as technical and device support, security and privacy protection. By strengthening measures such as construction, training, supervision and management, schools can better leverage the advantages of digital media and improve management efficiency and service quality. Going forward, digital media will play an even more important role in student management. Intelligent management, expanding management fields and promoting student self-management will be the direction of future development. However, the security and popularity of digital media remain challenges that need to be addressed. By strengthening comprehensive measures such as construction, training, supervision and management, schools can better guide the future development of digital media in student management, provide students with more intelligent, personalized and efficient services, and promote their all-round development.

Cloud leakage in higher education in South Africa: A case of University of Technology

Background: Users with knowledge of an organisation can pose risks to Cloud Computing, including current and past employees and external stakeholders with access to the organisation’s cloud. These insiders may engage in intentional or unintentional disruptive behaviors, causing significant harm to the organisation. A study focused on insider threats in South African higher education examined the tactics used by cybersecurity leaders to enforce cybersecurity policies.Objectives: The goal of this study was to develop a comprehensive insider mitigation framework for cloud leakage in a South African University.Method: The study employed qualitative methodologies and a case study approach. Open-ended interviews were conducted to collect data from the participants. The collected data was coded and analysed using ATLAS.ti 22.Results: The study’s findings revealed that some of the major sources of cloud leakage are a lack of effective training, ineffective information security (IS) policy regulation, and the implementation of information security awareness workshops that provided advice on how information security should be managed in the university.Conclusion: Insider threats pose a serious risk to organisations. To mitigate this threat, it is crucial for organisations to establish strong security policies and closely monitor employee activities. By conducting a thorough assessment of insider threats, organisations can enhance their understanding of this dynamic threat and strengthen their defenses.Contribution: Although every employee is ultimately responsible for an organisation’s security, the most effective IS programmes demonstrate strong top-level leadership by setting a ‘tone at the top’ and promoting the benefits of IS through careful policy and guidance.

Management of cyber risks in the library: analysis of information security awareness of Estonian library employees

PurposeThis article surveys why libraries are vulnerable to social engineering attacks and how to manage risks of human-caused cyber threats on organizational level; investigates Estonian library staff awareness of information security and shares recommendations concerning focus areas that should be given more attention in the future.Design/methodology/approachThe data used in this paper is based on an overview of relevant literature highlighting the theoretical points and giving the reasons why human factor is considered the weakest link in information security and cyber security and studying how to mitigate the related risks in the organisation. To perform the survey, a web questionnaire was designed which included 63 sentences and was developed based on the knowledge-attitude-behaviour (KAB) model supported by Kruger and Kearney and Human Aspects of Information Security Questionnaire (HAIS-Q) designed by Parsons et al.FindingsThe research results show that the information security awareness of library employees is at a good level; however, awareness in two focus areas needs special attention and should be improved. The output of this study is the mapping of seven focus areas of information security policy in libraries based on the HAIS-Q framework and the KAB model.Originality/valueThe cyber awareness of library employees has not been studied in the world using HAIS-Q and KAB model, and to the best of the authors’ knowledge, no research has been previously carried out in the Estonian library context into cyber security awareness.

The Role of Libraries in Creating a Safer Cyberspace: Awareness of Estonian Library Employees in Information Security

The purpose of the study was to find out the knowledge, attitude and behavior of library employees related to information security in seven areas of the information security policy involving employees: password management, use of email, use of the Internet, use of social media, use of mobile devices, handling of information and reporting of cyber incidents. The theoretical part provides an overview of the importance of the topic in the context of libraries, the reasons why information security and cyber security must be at the same high level in libraries as, for example, in banks or healthcare institutions – we can only imagine what would happen if the digitized cultural memory of Estonia disappears or user data is leaked. The HAIS-Q (Human Aspects of Information Security Questionnaire) developed by Parsons et al. was used to collect data in order to assess information security awareness (ISA) within the organization. The method is based on three factors developed by the same authors: the Knowledge-Attitude-Behavior (KAB) model, which determines the security awareness of employees. The target group of the online questionnaire was Estonian librarians. A total of 388 librarians from public, research, school and specialist libraries responded to the survey. The mean and standard deviation of each focus area, descriptive statistics, Cronbach’s coefficient and Pearson correlation analysis were used to achieve the research objective. The results revealed that the chosen methodology is well suited for assessing the cyber literacy of not only library staff, but also the staff of all memory institutions (archives, museums) and identifying training needs.

Employees’ information security awareness (ISA) in public organisations: insights from cross-cultural studies in Sweden, France, and Tunisia

ABSTRACT The dominance of national culture in organisational environments has been widely acknowledged. This study aims to explore the impact of national culture on information security awareness by examining cultural characteristics in the public sector. Drawing on Hofstede's model, a literature review was conducted to analyze existing knowledge and identify cultural traits in selected countries. Empirical data were collected through semi-structured interviews conducted in Sweden, France, and Tunisia. The data were analyzed using the Human Aspects of Information Security (HAIS) model, revealing distinct patterns and emphasising the role of culture in shaping behaviours. The findings underscore the importance of involving Swedish employees in the policy design process to effectively enhance information security awareness. For French employees, it was found that learning from past experiences and respecting hierarchical structures are crucial factors in raising awareness. Conversely, in Tunisia, information security initiatives should take into account the social and relational aspects to promote awareness effectively. These insights provide valuable guidance to managers in multinational organisations, enabling them to comprehend the underlying forces and dynamics in countries with similar characteristics.

Factors Toward Risk Influencing Millennials Willingness to Invest in Peer-to-Peer Lending

The objective of this study is to analyze the factors influencing the risk perception that affects millennials' willingness to invest in P2P lending. To achieve this goal, a conceptual model was developed involving variables such as financial literacy, company reputation, information security awareness, risk perception, and intention to invest. The sample consisted of 220 respondents, and data were collected through a questionnaire. Structural Equation Modeling and SmartPLS Statistical Software were used to examine the data. The study’s results suggest that, while financial literacy does not significantly affect risk perception, firm reputation and information security knowledge do. The findings also demonstrate that risk perception has a major impact on the intention to invest. The implications of this research highlight the importance of reputation and information security in shaping risk perception in the fintech sector. Fintech companies should prioritize building a strong reputation through good service, transparency, and authentic communication, as well as implementing robust cybersecurity measures to protect investor data. Financial practitioners also need to educate investors about risks and emphasize the importance of reputation and information security in decision-making, providing guidance in risk assessment and management aligned with investors' goals and risk tolerance.

MEASUREMENT OF EMPLOYEE INFORMATION SECURITY AWARENESS: CASE STUDY AT FINANCIAL INSTITUTION

The lack of awareness regarding information security among employees in financial institutions can have detrimental impacts on both customers and the institution itself, both financially and in terms of trust. Therefore, this research aims to assess the information security awareness at PT XYZ, a financial institution, in order to identify the existing level of awareness, which will be used to provide recommendations. The method applied in this research is quantitative, using a questionnaire as a tool for data collection and distribution with a voluntary sampling technique among PT XYZ employees concerning their awareness of information security. The assessment of information security awareness covers 8 specific aspects, with 7 of them drawing sources from HAIS-Q and another 1 referring to the KAMI Index, using the Analytic Hierarchy Process (AHP) for weighting each area. The total number of respondents participating in this research is 52. The research results affirm that PT XYZ employees have a positive awareness of information security, indicating that there are no urgent actions needed at present. However, there are specific areas with potential for improvement, hence recommendations are provided to enhance and sustain information security awareness among employees.

Digital Transformation and Digital Competences of Urban and Rural Polish Youths

This article explores the level of digital competence of young people in Poland, with the indirect aim being to show the differences in the level of digital competence for adolescents living in rural and urban areas. The research covered a sample of 985 respondents, from 11–18 years old, from Poland. The research was carried out within the EU Kids Online network. The survey tool related to the assessment of digital competences covered issues of installation of software on mobile devices, configuration of internet access as pertains to confidential information, information security awareness, management of information downloaded from the internet, configuration of social networks, e-shopping, verification of costs related to the use of additional software, advanced information search, checking the reliability of information, and editing online content. Descriptive statistics, k-means cluster analysis, one-way analysis of variance (non-parametric test), and correlations were used to show the differences between rural and urban adolescents in the indicated areas. The collected data offer several postulates for education and education policy, being not only diagnostic but also implementational. Based on the analysis of the data, it was noted that: (a) Eleven areas related to basic digital competence strongly differentiate between urban and rural young people; (b) rural young people rate their own digital competence lower than urban young people do; (c) a small percentage of young people from both rural and urban areas have low digital competence; (d) one well-developed area of key competence does not always co-occur with another well-developed area; and (e) the style of using new media among rural and urban young people is similar.

Analysis of Information Security Awareness of E-Commerce Users Among Micro Small Medium Enterprises

Information security is vital in today's digital era. Micro small medium enterprises are always required to survive with the unfavorable conditions. Through e-commerce, businesses can be helped to sell their products widely. Carelessness in managing information in e-commerce applications by business owners can cause great losses. In this article, the information security awareness of MSMEs will be analyzed using the Knowledge Attitude Behaviour method developed by Kruger-Kearney. The sample of respondents was taken using a purposive sampling technique where the criteria for respondents were categorized micro small medium enterprises owners and using e- commerce applications to sell their products. This article succeeded in analyzing, that the awareness of business owners was in a good category. The resulting score is 93 and is considered a high value. There are several factors that cause the high awareness score obtained, one of which is the training held by the state-owned creative house. This article can be developed for further research.

Exploring the critical success factors of information security management: a mixed-method approach

Purpose Effective information security management (ISM) contributes to building a healthy organizational digital ecology. However, few studies have built an analysis framework for critical influencing factors to discuss the combined influence mechanism of multiple factors on ISM performance (ISMP). This study aims to explore the critical success factors and understand how these factors contribute to ISMP. Design/methodology/approach This study used a mixed-method approach to achieve this study’s research goals. In Study 1, the authors conducted a qualitative analysis to take a series of International Organization for Standardization/International Electrotechnical Commission standard documents as the basis to refine the critical factors that may influence organizations’ ISMP. In Study 2, the authors built a research model based on the organizational control perspective and used the survey-based partial least squares-based structural equation modeling (PLS-SEM) approach to understand the relationships between these factors in promoting ISMP. In Study 3, the authors used the fuzzy set qualitative comparative analysis (fsQCA) method to empirically analyze the complex mechanisms of how the combinations of the factors affect ISMP. Findings The following three research findings are obtained. First, based on the text-based qualitative analysis, the authors refined the critical success factors that may increase ISMP, including information security policies (ISP), top management support (TMS), alignment (ALI), information security risk assessment (IRA), information security awareness (ISA) and information security culture (ISC). Second, the PLS-SEM testing results confirmed TMS is the antecedent variable motivating organization’s formation (ISP) and information control (ISC) approaches; these two types of organization control approaches increase IRA, ISA and ALI and then promote ISMP directly and indirectly. Third, the fsQCA testing results found two configurations that can achieve high ISMP and one driving path that leads to non-high ISMP. Originality/value This study extends knowledge by exploring configuration factors to improve or impede the performances of organizations’ ISM. To the best of the authors’ knowledge, this study is one of the first to explore the use of the fsQCA approach in information security studies, and the results not only revealed causal associations between single factors but also highlighted the critical role of configuration factors in developing organizational ISMP. This study calls attention to information security managers of an organization should highlight the combined effect between the factors and reasonably allocate organizational resources to achieve high ISMP.

Sağlık Bilimleri Öğrencilerinin Sağlık Okuryazarlık, Etik Duyarlılık Düzeylerinin ve Bilgi Güvenliği Farkındalıklarının Mobil Sağlık Uygulamaları (Aplikasyonları) Kullanımları Bağlamında Değerlendirilmesi

Amaç: Doğu Anadolu Bölgesi’ndeki üniversitelerde örgün eğitim-öğretim gören lisans sağlık bilimleri öğrencilerinin sağlık okuryazarlık, etik duyarlılık düzeylerinin ve bilgi güvenliği farkındalıklarının mobil sağlık uygulamaları kullanımları bağlamında değerlendirilmesi amaçlanmıştır. Yöntem: Çalışma kesitsel tanımlayıcı araştırmadır. 2020-2021 Bahar ve Yaz Eğitim-Öğretim Dönemleri’nde Doğu Anadolu Bölgesi’ndeki araştırma iznini onaylayan 7 üniversitenin 324 (18 yaş üstü) örgün eğitim-öğretim gören lisans öğrencisi örneklemi oluşturmuştur. Veriler Tanıtıcı Bilgi Formu, Bilgi Güvenliği Farkındalık Ölçeği, Sağlık Okuryazarlığı Ölçeği, Etik Duyarlılık Ölçeği kullanılarak çevrimiçi ölçek aracılığıyla kartopu yöntemiyle toplanmıştır. Bulgular: Öğrencilerin %79’u 18-22 yaş aralığında, %75,9’u kadın, %57,1’i hemşirelik öğrencisidir. Öğrenciler sağlık okuryazarlığı eğitimi (%23,8), mobil sağlık uygulamaları eğitimi (%18,2), hasta güvenliği eğitimi (%60,2) almışlardır. Öğrencilerin bilgi güvenliği açısından saldırı ve tehditlere yönelik farkındalıklarının orta düzey, sağlık okuryazarlıklarının yüksek düzey, etik ikilem deneyimleme puanının orta düzey olduğu saptanmıştır. Eğitim alınan bölüm etik ikilem deneyimlemenin %2’sini, saldırı ve tehditlere yönelik farkındalığın %2’sini ve sağlık okuryazarlığın %2’sini açıklamaktadır. Sağlık okuryazarlık, etik ikilem deneyimlemenin %3’ünü açıklamaktadır. Sonuç: Sağlık bilimleri öğrencilerinin başarılı mobil sağlık uygulamaları kullanımları, çalışma yaşamlarında kendilerinin ve toplumun akıllı sağlık hizmetlerini etkin ve güvenli bir şekilde kullanabilmelerini, sağlık hizmetlerinin ve lisans eğitimlerinin kalitelerinin artmasını sağlayacaktır.

Evaluating the Influence of Attitude versus Knowledge and Individual Factor versus Intervention Factor on Information Security Awareness in Local Government

Local government as a public organization that typically collects mass amounts of sensitive data is one of the vulnerable and targeted sectors for information security attacks. The human aspect is the most critical but weak link to information security incidents. Among government organizations, local governments usually have more limited human resources either in number and competencies including information security awareness. This study aims to validate the Information Security Awareness (ISA) model for local government, including confirming the influence of knowledge and attitude on information security behavior, evaluating the stronger predictor between knowledge and attitude toward information security behavior, and analyzing the influence of gender (as an individual factor) and training (as an intervention factor) on the information security behavior. Utilizing the HAIS-Q assessment tool, this study collected responses from 704 employees of 68 departments/units under the government of East Java Province, Indonesia. The results suggest that in the local government context, there is a significant direct relationship between Knowledge of information security and information security Behavior and its indirect relationship via Attitude toward information security behavior. However, Attitude toward information security behavior has a stronger effect on Behavior than Knowledge. This study also suggests significant differences in information security behavior between employees who have trained and those who have not, regardless of gender. The proposed model suggests that to improve Information Security Awareness among employees, local government should focus on improving employees’ Attitudes toward information security behavior, either by improving their Knowledge of Information Security via training or their affective attitude toward information security behavior.

Measurement of Employee Information Security Awareness: A Case Study of National Civil Service Agency

National Civil Service Agency is a State institution tasked with the role and function of overseeing and implementing national civil servant management using information technology. There are 4.2 million civil servant data distributed throughout Indonesia that must be safeguarded by BKN. As the utilization of information systems grows, it also leads to an increase in information security risks. Based on the reports from Id-SIRTII/CC and BKN's internal report, there has been an increase in cyber attacks targeting BKN. In addition, there are other types of attacks that occur, such as online defacement, phishing, DDOS, and employee data theft, as well as the presence of employees who are still indifferent to information security. Based on this, the objective of this research is to measure the level of information security awareness among BKN employees and identify the factors that influence it. The Human Aspects of Information Security Questionnaire (HAIS-Q) using the Knowledge, Attitude, and Behavior (KAB) model was selected for measurement, with an additional focus on the Management of Information Systems/Technology Assets, consisting of a total of 75 statements. The quantitative measurements conducted yielded a result of 88.80% for the level of information security awareness among BKN employees, categorized as good. Furthermore, there is a significant influence on information security awareness from the dimensions of knowledge towards attitude, attitude towards behavior, and knowledge towards behavior.

Information Security Awareness Literature Review: Focus Area for Measurement Instruments

A critical factor in information security is information security awareness, that each individual owns. Information security awareness can be increased by measuring individual security awareness in several areas using the Human Aspect of Information Security Questionnaire (HAIS-Q). This article was created to find a focus area used in several studies as a criterion for measuring security awareness. The search for focus areas was carried out using the Systematic Literature Review (SLR) method from several articles in the last five years. The results of this article will facilitate the selection of focus areas in future research on measuring information security awareness.

Measurement of Information Security and Privacy Awareness in College Students after the Covid-19 Pandemic

The Covid-19 pandemic has acted as a catalyst for digital transformation, particularly in the realm of education. Consequently, this research aims to ascertain the level of information security awareness among students employing the HAIS-Q. The study employs the MCDA method to determine the weighting of the three dimensions and seven focal areas that have been predetermined. The findings of the study reveal that the overall level of ISA among students falls within the "good" category (80%). The measurement results in this study can serve as valuable input for institutions to enhance information security awareness among their student populations.

Analiza socioloških aspekata informacione bezbednosti primenom HAIS-Q modela

The aim of the paper is to research the sociological aspects of information security through the HAIS-Q model, at the Faculty of Engineering Management. The research was conducted anonymously, within a time frame of four months, on a sample of 179 respondents. The HAIS-Q model is built from seven focus groups, which pervade the variables of knowledge, attitudes and behaviours, while the subject research is focused on the focus area "use of the Internet". By analyzing the variables with the lowest scores in one of the seven focus areas of this model, gaps in information security awareness among employees are explored. The paper highlights the implications of these deficiencies for organizational security and information protection, with an emphasis on the importance of improving the variables with the lowest scores. Through a comprehensive consideration of the sociological dimensions of information security, this paper contributes to a better understanding and management of this important field, emphasizing its importance in today's digital age.

An empirical study on differences between self-assessed and measured real risk in online behaviour

As the leading cause of security breaches is human susceptibility to hackers' deception, the riskiness of an individual's online behaviour and low awareness regarding privacy protection significantly influence the overall security of an information system. Thus, this study aimed to compare self-assessed and measured real risk in online behaviour among online users. The additional aim was to modify the questionnaire by replacing the existing trick question about password quality with the new questions on accepting the terms and conditions. An international online Behavioral Cognitive Internet Security Questionnaire (BCISQ), validated in previous studies, was used for data collection. The examinees involved in this study were 278 students from different faculties. The results showed a relatively high level of risk in online behaviour, as 22.7% of examinees revealed their passwords. In comparison, only 10.8% read the consent statement. Students who behave in a riskier manner self-assess themselves as being significantly safer in online behaviour, which is contradictory. They also performed worse in all other examined variables. The new version of the simulation subscale, with improved internal consistency and reliability (Cronbach's Alfa=0.810), consists of only three items, which are questions used in the previous version, without adding any of the two tested trick questions. Generally, this study concludes that, on average, information security awareness is still low among online users and that even the ones realistically acting riskier believe they are acting more safely.

DIGITAL MARKETING, CYBERCRIME, AND ISLAMIC BUSINESS ETHICS A CASE STUDY IN INDONESIA

This study aims to explore digital marketing in-depth, and cybercrime in the business sector in Indonesia. This study investigates the important contribution of Islamic business ethics in anticipating cybercrimes in the digital economy in Indonesia. The impact of digital marketing and cybercrime incidents on the business sector needs to be investigated further in order to minimize the occurrence of cybercrime, such as in e-Commerce Shopee, Tokopedia and some of them by using a qualitative approach and case studies. One of the triggers for incidents of cybercrime is due to the use of digital marketing which has now gone global, but self-awareness is weak so it is necessary to internalize the values of Islamic business ethics in order to prevent it from within oneself. This study focuses on the economic and business sectors so that the findings can be generalized to other sectors. Then, a descriptive analysis study was used to explore case by case to help categorize research findings. Awareness of information and communication technology security has received less attention due to the proliferation of digital technology innovations which have implications for cybercrimes in the economic and business sectors. Therefore, it is important for business people (users, consumers, and society) to realize that business ethical values are very important in achieving success, not just materially but non-materially. This study describes in depth the benefits of digital marketing on the one hand, and on the other hand the negative impact that results in cybercrime. This study also raises awareness among business people about the importance of Islamic business ethics in the economic and business sectors.