Information Security Management Research Articles

CyberFusion Protocols: Strategic Integration of Enterprise Risk Management, ISO 27001, and Mobile Forensics for Advanced Digital Security in the Modern Business Ecosystem

This research paper explores the integration of Enterprise Risk Management (ERM), the ISO 27001 standard, and mobile forensics methodologies as a comprehensive framework for enhancing digital security measures within modern business ecosystems. Employing a quantitative research design, this paper utilized a survey methodology, gathering data from 372 professionals across various sectors including risk management, IT/security, and forensic analysis. The analysis was conducted using Partial Least Squares Structural Equation Modeling (PLS-SEM) to test the research hypotheses and assess the impact of the integrated approach on organizational digital security capabilities. The findings reveal a significant positive effect of integrating ERM, ISO 27001, and mobile forensics on an organization’s ability to manage digital risks effectively. Specifically, the integrated approach was found to enhance strategic digital security management, improve the identification, assessment, and mitigation of digital risks, strengthen information security management practices, and elevate the effectiveness and efficiency of digital crime investigation processes. These outcomes underscore the value of a cohesive strategy that leverages the strengths of ERM, ISO 27001, and mobile forensics in addressing the complex and interconnected digital threat landscape. Based on the results, the study recommends adopting a holistic security framework, investing in continuous professional development, leveraging technological advancements for proactive security management, and fostering a culture of security and collaboration. Such measures are crucial for organizations aiming to enhance their resilience against cyber threats and protect their digital assets in the face of sophisticated cyber-attacks. This research contributes to the field of cybersecurity by providing empirical evidence on the benefits of an integrated approach to digital security, offering practical guidelines for organizations seeking to improve their digital security measures, and highlighting the need for continuous adaptation and collaboration in the fight against cyber threats.

Evaluating the status of information security management in faculty libraries: a case study of Allameh Tabatabai University

ABSTRACT Aim This study aims to evaluate the status of Information Security Management in Faculty Libraries at Allameh Tabatabai University, Tehran, Iran. This study is based on the standard of ISO/IEC 27,002. Method The research method is a descriptive survey. Data was collected through a researcher-made questionnaire based on the ISO/IEC standard 27,002 which includes 11 main indicators and 39 sub-components. The statistical population of this study is 45 main and middle managers of faculties’ libraries of Allameh Tabatabai University located in Tehran (Faculties of Law, Psychology and Educational Sciences, Management and Accounting, Physical Education, Literature and Foreign Languages, Communication Sciences, Economics, Social Sciences, Mathematical and Computer Sciences). Due to the limited statistical population, sampling was not performed. Data analysis was done using descriptive statistics, inferential, and SPSS software. Findings The average score of information security management performance in the faculty libraries of Allameh Tabatabaei University located in Tehran according to ISO/IEC27002 is above average. Examination of the average scores of performance evaluation indicators of faculty libraries of Allameh Tabatabai University showed that four indicators including Information Security Management Policy, Information Security Incident Management, Cryptography, and Security Supplier Relationships are not in a favorable situation and need attention from the relevant managers. In other indicators, the performance of faculty libraries is at the desired level. Conclusion The results show a desirable level of information security management in the faculty libraries of Allameh Tabatabai in Tehran. However, some indicators, such as Information Security Policies, Information Security Incident Management, Cryptography, and Supplier Relationships, are still weaker. Therefore, to achieve security goals some suggestions are provided.

Redesigning the HR processes for scaling up ISOQAR (India) Private Limited

Learning outcomes Post analysis of the case study, students will be able to comprehend the significance of Six Sigma and its integration with the human resources (HR) processes in the service sector. Post case study discussion, students will be able to: examine the HR processes of ISOQAR (India) and deduce the reasons to seek change in their approach; validate the importance of integrating Six Sigma in the human resource management (HRM) framework of an organization; and categorize the difficulties encountered while implementing Six Sigma in the service sector compared to those in a manufacturing environment. Case overview/synopsis In September 2006, four senior employees of an audit firm made the decision to start their own venture. They identified a gap in a sizable and fiercely competitive auditing industry. Nishid Shivdas, Suhas Risbood, Shiv Prakash Bhutra and Burgis Bulsara, co-founders of ISOQAR (India), had distinct leadership experiences that drove the organization to concentrate on developing a broad range of services, with a focus on management consulting, training and audit services. They created a distinctive positioning in market in a short span and reported growth by building strong customer relationships, providing high-quality service and personalized attention to individual clients and meeting deadlines. The wide gamut of services included areas such as the payment card industry, data security standard, information security management systems, business continuity management, service management systems, food safety management system, Responsible Jewellery Council certification services, retail audit services and risk assessment services. They concentrated on collaborating with UKAS for their accreditations. The focus on offering great services with faster response times, a varied array of services and the expertise of its founders let them to price their services at par with some of its competitors, and even higher in few cases. It did not have a large support staff; however, the ones they had were multifaceted, both full time and contractual. Being in the service industry, the founders realized that to maintain growth as the firm aims to grow geographically, their heavy engagement in the existing operations would have to give way to more standardized processes in general and HR in particular. Ensuring the integration of the current workforce to the Six Sigma framework presented challenges. Complexity academic level This case is designed for second-year students enrolled in Master of Business Administration/Post Graduate Diploma in Management (MBA/PGDM) or equivalent postgraduate-level programmes, in the domain of “Human Resource.” It will enable the students to engage with the significance of “Six Sigma” being used in various processes in the HRM framework. It can also be taught to students in the domain of Marketing because of its relevance to the service sector. Supplementary materials Teaching notes are available for educators only. Subject code CSS 6: Human Resource Management.

Information Security and Privacy Management in Intelligent Transportation Systems

With the global digitalization of services, passenger Intelligent Transportation Systems (ITSs) have emerged as transformative components, yet the practical implementation of state-of-the-art measures to ensure information security and privacy presents substantial challenges. In this article, we propose a framework for information security and privacy management. The framework is validated through two empirical studies. First, the framework is used to extract data during the literature review defining state-of-the-art aspects and measures. Second, a survey-based analysis of running passenger ITSs in selected regions of the European Union provides insights into real-life ITS implementations, enabling a thorough comparison with the proposed state-of-the-art measures. The study also showed that the proposed framework depicts some dependencies between measures, and, thus, using its matrix structure for the state of information security and privacy management in the organization helps to cross-check the usage of policies or methodologies by the organization departments. Our findings resulted in recommendations for organizations developing ITSs to enhance their information security and privacy management systems and bridge the gap between research proposals and practical implementation.

Implementing SIEM(Security Information and Environment Management) in Microsoft Azure

Abstract: In an increasingly interconnected and digital world, the need for robust cybersecurity measures is paramount. Cyberattacks can therefore occur upon any device at any moment of time in order to steal the sensitive information of the user or can result in identity theft and cyberbullying. There are varieties of attacks that may occur without the user being aware about the same that their computer has been attacked and the hacker has overall access of their data. Also, a user cannot sit in front of their device throughout their life to monitor and protect any type of cyberattack. Therefore, in order to solve the following problems and to enhance the overall security and accuracy of safeguarding the device and its data, we implement our project Security Information and Environment Management (SIEM) system within the Microsoft Azure cloud ecosystem. SIEM plays a critical role in monitoring, detecting, and responding to security threats, making it a crucial component of any organization's cybersecurity strategy. To view the notification of the attack for a user and all its details, we therefore connect the SIEM implementations and logs over Microsoft Azure platform, and generate the same with the help of a command-shell Windows PowerShell.

Improving Threat Detection with Elastic Stack based Security Information and Event Management

Improving Threat Detection with Elastic Stack based Security Information and Event Management

Evaluation of the Impact of Risk Management and Information Security on Cybersecurity Maturity of the Institute ABC Data Management Application

In the contemporary digital landscape, organizations face an escalating array of cyber threats that imperil the security and confidentiality of their data assets. This quantitative study investigates the impact of risk management strategies and information security measures on the cyber security maturity of ABC Institute's data management application. Survey data were collected from 122 employees directly engaged in data management and security roles within the institute, and Structural Equation Modeling (SEM) with Partial Least Squares (PLS) was employed for data analysis. The findings reveal significant positive associations between risk management practices, information security measures, and cyber security maturity. These results emphasize the crucial role of comprehensive risk management strategies and robust information security measures in bolstering cyber resilience. Practical recommendations stemming from this study provide actionable insights for organizations aiming to fortify their cyber security posture.

CSIMQ Anniversary Editor-in-Chief Thoughts and Editorial Introduction to Issue 38: Model-based and Decision Support Methods for Next-generation Information Systems

CSIMQ enters its second decade of existence, therefore the preface for the current issue starts with a message from the Editor-in-Chief, highlighting the journal’s mission of dealing with complexity management and systems modeling as meta-fields that have emerged from Information Science but remain relevant across diverse domains. Afterwards, the 38th issue is introduced by summarizing the four articles selected by guest issue editors on topics related to novel decision support methods or model-based frameworks for evolving or evaluating information systems. Design-oriented research is the dominant approach in these works, balancing technical design decisions insights with empirical evaluation cases. Three of the selected articles contribute with decision-support methods or frameworks – for ESG (Environment-Social-Governance) accounting, for democratized decision services and for information security management. Another article revisits UML-based model-driven software development from a new perspective.

Beyond Conventional Threat Defense: Implementing Advanced Threat Modeling Techniques, Risk Modeling Frameworks and Contingency Planning in the Healthcare Sector for Enhanced Data Security

This research study explores the integration of advanced threat and risk modeling with scenario and contingency planning to enhance security and resilience within healthcare organizations. Given the escalating complexity and frequency of cyber threats targeting the healthcare sector, the study assesses the efficacy of a synergistic cybersecurity approach. Utilizing a quantitative research methodology, data were collected through a survey administered to 452 healthcare practitioners, focusing on their perceptions and experiences with cybersecurity threats, risk modeling techniques, and the effectiveness of scenario and contingency planning. The survey incorporated a structured questionnaire utilizing Likert scale closed-ended questions, analyzed using Partial Least Squares Structural Equation Modeling (PLS-SEM) to test the proposed four hypotheses related to the impact of advanced threat and risk modeling and scenario and contingency planning on the cybersecurity posture and operational resilience of healthcare organizations. Results indicated a significant positive relationship between advanced threat modeling and scenario planning with the cybersecurity posture of healthcare organizations, which, in turn, notably enhances organizational resilience. Specifically, the study found that integrating advanced threat and risk modeling with scenario and contingency planning significantly improves the ability of healthcare organizations to identify, assess, and mitigate cyber threats effectively. Furthermore, the findings suggest that such integration contributes to more informed decision-making, improved information security management practices, and more effective and efficient digital crime investigation processes. The research study concludes that a comprehensive approach integrating advanced threat and risk modeling with scenario and contingency planning significantly enhances healthcare organizations' cybersecurity posture and operational resilience. The study recommends adopting an integrated cybersecurity strategy, continuous cybersecurity education for all organizational members,regular cybersecurity assessments, and fostering collaboration for enhanced cybersecurity intelligence.

Managing Inherent IT Business Risk against Cyber Threats: a Decision Analysis Case Study of an Oil and Gas Company

XYZ, an anonymized oil and gas company, aims to enhance cyber resilience by strategically managing inherent risk profiles in cybersecurity, aligned with business needs and stakeholder expectations. This research addresses challenges including Information Security Control determination, proficiency improvement in risk management, and ISMS preparedness. Additionally, it tackles procurement strategy for Security Operations Control across XYZ Group, operating under PSC Gross Split, Cost Recovery, and Non-PSC statuses. Utilizing diverse frameworks such as problem tree analysis, stakeholders’ power-interest matrix, MITRE ATT&CK, NIST 800-53, COBIT 2019, ISO 27005:2022, KAMI 5.0, and SMART, data analysis includes risk documents, interviews, and cyber-attack data. The research establishes effective IS Control for risk mitigation, readiness for Information Security Management System ISMS implementation, strategic programs enhancing risk management capability, and refined Security Operations Control procurement. These outcomes, incorporated into a collaborative contract structure, significantly mitigate cyber threats and potential impacts, such as disruptions to operations, revenue reduction, increased costs, data theft, and non-compliance.

Exploration on human resource management and prediction model of data-driven information security in Internet of Things

The advent of the Internet of Things (IoT) has accelerated the pace of economic development across all sectors. However, it has also brought significant challenges to traditional human resource management, revealing an increasing number of problems and making it unable to meet the needs of contemporary enterprise management. The IoT has brought numerous conveniences to human society, but it has also led to security issues in communication networks. To ensure the security of these networks, it is necessary to integrate data-driven technologies to address this issue. In response to the current state of human resource management, this paper proposes the application of IoT technology in enterprise human resource management and combines it with radial basis function neural networks to construct a model for predicting enterprise human resource needs. The model was also experimentally analyzed. The results show that under this algorithm, the average prediction accuracy for the number of employees over five years is 90.2 %, and the average prediction accuracy for sales revenue is 93.9 %. These data indicate that the prediction accuracy of the model under this study's algorithm has significantly improved. This paper also conducted evaluation experiments on a wireless communication network security risk prediction model. The average prediction accuracy of four tests is 91.21 %, indicating that the model has high prediction accuracy. By introducing data-driven technology and IoT applications, this study provides new solutions for human resource management and communication network security, promoting technological innovation in the fields of traditional human resource management and information security management. The research not only improves the accuracy of the prediction models but also provides strong support for decision-making and risk management in related fields, demonstrating the great potential of big data and artificial intelligence technology in the future of enterprise management and security.

ВЫЯВЛЕНИЕ ПРОБЛЕМ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ МЕТОДОМ СИСТЕМАТИЧЕСКОГО ОБЗОРА ЛИТЕРАТУРЫ

The field of information security covers a wide range of technical, organizational and social aspects, requiring information security specialists to take a unique and comprehensive approach to the development, support, operation, evaluation and improvement of information security management systems. An important element of successful information protection is the accurate identification and assessment of risks and vulnerabilities that may become a source of threats. In existing publications, as a rule, it is assumed that specialists have the necessary experience and knowledge to conduct risk analysis. However, in the dynamic world of information technology and threats, an information security specialist faces a huge amount of information and potential risks that are constantly evolving. Because of this, it is an impossible task to keep in mind all kinds of threats to information security. 
 The purpose is to identify actual problems of information security, potentially acting as sources of information security risk, based on the method of systematic review of the literature. Results: 73 actual problems of information security have been identified, which an information security specialist should take into account in his activities. Understanding these issues makes it possible to develop more effective protection strategies, as well as to make informed and informed decisions when developing and applying security measures.

Database Access Information Security Management Simulation under Big Data Platform

When people perform database access information security management, the traditional method cannot accurately verify the identity of the visitor, the credibility of the identity information, and the security management of the access information. With the widespread application of big data technology, the amount of data in databases is rapidly increasing, which brings new challenges to information security management. The main purpose of this study is to explore how to more effectively manage the security of database access information on big data platforms. Therefore, the trusted computing platform is established to implement database access information security management under the data platform. The method determines the user behavior is credible by establishing a behavior chain of behavior based on the user identity and measuring user operation behavior. For the user's private data, the encryption/decryption module is used for security protection, preventing data from being leaked through illegal copying. A trusted metric model based on the USB Key user identity is established and a trusted platform is established. By improving the ELGamal algorithm, the IMC/IMV metrics architecture is utilized to measure platform security attributes. In the first round of anonymous authentication, the identity authentication of the platform is completely completed, and the database access information security management under the big data platform is completed. The simulation results show that in 10 experiments, the transmission time delay of TCP/IP protocol is less than 200ms, and the security of database access information is enhanced after the encryption system is established in the database. This has certain theoretical enlightenment for the improvement of database security and the optimization of information security management.

I-ISSUES—Industrial-Interoperable Safe and Secure Urban Energy Systems

Urban planners are involved in designing future urban energy systems as a part of their path toward decarbonization or Net Zero targets before 2050. In this process, new energy and information flows between industrial and urban regions should be considered, as well as safety and security managerial aspects regarding the existing and new infrastructures. This research aims to help engineering professionals and public planners define new collaboration dynamics to make industrial energy systems safer, more secure, and interoperable, surpassing the existing knowledge. Firstly, several recent R&D aspects are analyzed, demonstrating the organizational gap and providing early integration or knowledge reuse opportunities from R&D projects. After that, the authors present a model called Industrial-Interoperable Safe and Secure Urban Energy Systems (i-ISSUES), a multi-disciplinary approach combining classic urban energy planning, information technology use, safety and security management, and systems engineering as the integrated disciplines. The model detects research trends, providing a first set of readings with some improvements.

PUBLIC DISCLOSURE OF INFORMATION SECURITY BREACH INCIDENTS: SHORT-TERM STOCK MARKET REACTION ON INDIAN LISTED FIRMS

ABSTRACT Data breach incidents are growing by the day and firms struggle to detect, defend, and respond to such breaches. Nowadays, security breaches are considered one of the major concerns for corporate organizations around the world. Hence, it is essential to assess the impact of such breaches on organizations. This article reports stock price reaction due to public disclosure of information security breach (ISB) incidents on publicly traded firms of India. Using the event study methodology on a sample of 120 publicly announced ISB incidents between January 2004 and April 2019 pertaining to 69 publicly listed firms of India, we found that exposure to an ISB incident exacerbates negative stock price reactions based on both one-factor market model and Fama-French three-factor model. On average, breached firms lost 0.55% of their market value within two days post the announcement of ISB incidents. Further, we found some factors that significantly negatively impacted Cumulative Abnormal Return (CAR). Important emerging factors such as type of compromised data, sentiment, subjectivity, and remedial strategy significantly impact CAR. According to our study findings, we suggest that firms should mention remedial measures in terms of apology and/or compensation in the ISB disclosure. Furthermore, the result indicates that investors penalize listed firms for subsequent ISB incidents. Thus, our findings may guide Chief Information Officers (CIOs), information security managers, and IT managers of publicly traded firms to devise various strategies in terms of IT security measures and content of the ISB disclosure.

Chief Information Security Officer: A Vital Component of Organizational Information Security Management

Chief Information Security Officer: A Vital Component of Organizational Information Security Management

GOVERNANCE EVALUATION ELECTRONIC SECURITY SYSTEM (ESS) (Case Study: ABC Central Bank)

As we know, the role of the security system has a very important role for a state institution to provide security and comfort in carrying out its functions, such as the ABC central bank. A good security system is a security system that is supported by a reliable electronic security system and is composed of several components such as a CCTV monitoring system, Access Control System (ACS), Security Alarm System (SAS), and Fire Alarm System (FAS). This system is very necessary to provide support for the duties of these state institutions to protect devices, data and electronic infrastructure from potential threats and security risks. The main functions of electronic security systems include prevention, detection, response to incidents, and recovery after disturbances/disasters. For this reason, efforts are needed to provide an evaluation of the system maturity level and information security management as a form of risk management to maintain the continuity of system use. This research uses the INDEKS KAMI 4.1 to map ESS governance maturity and the OCTAVE Allegro method to analyze information security management. From the analysis carried out, it has been concluded that the ESS implementation has been operated well in accordance with the security system requirements and has reached a good level of governance maturity. Information security management analysis carried out using the OCTAVE Allegro method has succeeded in identifying information security management with the result that information security management has been implemented well. This is proven by the existence of indicators, namely CCTV recording data, log systems as information assets that have been managed and distributed according to authority

Overview of Security Information and Event Management Systems

Overview of Security Information and Event Management Systems

SUBSTANTIATION OF THE NEED TO IMPLEMENT A CONTINUOUS INFORMATION SECURITY PROCESS AT ENTERPRISES

The article discusses information security in the system of an industrial enterprise. Attention is focused on the need to implement a continuous information security process to protect all information assets from leaks, theft and unauthorized disclosure, the main provisions of information security management standards are analyzed. Objective: To optimize the methods of software protection of modern industrial enterprises, as well as to reduce threats and vulnerabilities related to information security at enterprises. Method or methodology of the work: In the process of investigating the problem, analytical methods of analysis were used. Results:  The need to use ISO/IEC 27001 standards and the PDCA (Plan-Do-Check-Act) model at industrial enterprises of high-tech sectors of the economy in order to reduce threats and losses of information security, identify critical factors that negatively affect business processes and the enterprises themselves. Practical implications: The results obtained can be used as a theoretical basis for existing assessments of information security tools and automated security systems at high-tech industrial enterprises in modern economic conditions.

The moderating impact of organizational culture on information security compliance

This research paper investigates the association between organizational culture and employees' compliance with information security policies. Drawing upon rational choice theory (RCT) and the competing values framework (CVF), our study explores the moderating effects of cultural dimensions on information security compliance in a diverse range of organizations. We employ a scenario-based approach and analyze the data using Partial Least Squares Structural Equation Modeling (PLS-SEM). Our findings underscore the robustness of the model and emphasize the pivotal role of cultural dimensions in influencing employees' compliance intentions.
     The study contributes by synthesizing non-fear-based deterrence theory with organizational culture theory, offering practical insights for information security managers. Recommendations include framing compliance as a moral duty, involving end-users in policy development, utilizing effective communication, implementing monitoring systems, and fostering a consistency culture. For organizations, the research underscores the importance of cultivating an ethical culture, emphasizing moral beliefs, and leveraging cultural dimensions to enhance compliance intentions.
     Acknowledging limitations related to single-country data collection, a focus on compliance intentions, and the selection of organizations with established policies, this research paves the way for future studies. Future research should aim to replicate this study in diverse cultural settings, consider individual-level culture measurement, and explore additional moderating factors. This research contributes to understanding the intricate relationship between organizational culture and information security compliance, offering actionable insights for practitioners and prospects for further exploration in the information security field.