Information Technology Security Management Research Articles

ECHO Cyber-Skills Framework as a Cyber-Skills Education and Training Tool in Health and Medical Tourism

The ECHO Horizon 2020 Project develops a European cybersecurity ecosystem. One of its assets is the ECHO Cyber-Skills Framework (ECSF). This work in progress paper aims to improve cybersecurity education and training in the healthcare industry including health and medical tourism. First, this paper finds out how ECSF will benefit the healthcare sector regarding cyber-skills and awareness in order to create a more secure information technology (IT) environment when it comes to healthcare. Based on these findings, the paper proposes a strategy to adopt ECSF in order to improve the existing state of IT security and increase worker and management awareness and understanding. Finally, the paper looks at ECSF’s possibilities to be a tool for education and training in health and medical tourism.

Analysis of Network Intrusion Detection Technology Based on Computer Information Security Technology

Data is the basis of information technology security management, with the arrival of the era of big data, computer network security is also facing a lot of challenges, we all know that the network has many characteristics: open, virtual characteristics, which there are a lot of security risks. So we must strengthen the network security analysis, explore the main network security hidden danger, and put forward the corresponding to the computer information network security precautions, now is the information age, big data is the basic characteristic, and the Internet technology widespread application, computer network security problems often appear, often have all kinds of viruses into our computer, so we also want to strengthen the network security management, and puts forward the countermeasures, so as to improve the level of safety in network, strengthen network security protection, it is very important[1].

An Integrated Framework for Managing Information Technology Security Uncertainty

Information security to date has been driven a lot of attention in business world. The cyber security standards play significant and crucial role in promoting feasible approaches to organizations while making comprehensive strategical planning. This paper aims at providing a systematic overview of information technology (IT) security management in organizations. Conducted a structured literature from academic database and industry whitepapers, we review a number of the critical issues and challenges facing the industry today and in the future. In line with the fundamental elements of information security, we propose an integrated framework to understand the current situation of IT security management. In particular, we focus on several critical fundamental functions of IT security management: Security and Risk Management, Security Operations, and Security Assessments and Testing. Then, we use the proposed framework as a lens to discuss and solve the security issues in bring your own device (BYOD) in organizations. Keywords: IT security, IT security framework, bring your own device DOI : 10.7176/EJBM/12-18-01 Publication date :June 30th 2020

A Comparative Assessment of Computer Security Incidence Handling

Incidence response and handling has become quite a crucial, indispensible constituent of information technology security management, as it provides an organised way of handling the aftermaths of a security breach. It presents an organisation’s reaction to illegitimate and unacceptable exploits on its assets or infrastructure. The goal must be to successfully neutralise the incident, such that damages are significantly reduced with attendant reduction in recovery time and costs. To achieve this, several approaches and methodologies proposed have been reviewed with a view to identifying essential processes. What is needed is referred to as incident capability mingled with collaborations. This defines a shift from response to management of computer security incidents in anointer relationship manner that foster collaboration through the exchange and sharing of incidence management details among several distinct organizations. Key step-up aspects centre on issues of enforcing and assuring trust and privacy. A viable collaborative incident response approach must be able to proffer both proactive and reactive mechanisms that are management-oriented and incorporating all required techniques and procedures.

Toward understanding distributed cognition in IT security management: the role of cues and norms

Information technology security management (ITSM) entails significant challenges, including the distribution of tasks and stakeholders across the organization, the need for security practitioners to cooperate with others, and technological complexity. We investigate the organizational processes in ITSM using qualitative analysis of interviews with ITSM practitioners. To account for the distributed nature of ITSM, we utilized and extended a distributed cognition framework that includes as key aspects the themes of cues and norms. We show how ITSM challenges foster under-use of cues and norms, which comprises a type of risk that may result in outcomes that are adverse to the organization’s interests. Throughout, we use scenarios told by our participants to illustrate the various concepts related to cues and norms as well as ITSM breakdowns.

Information technology security management concerns in global financial services institutions

PurposeThe purpose of this paper is to add a layer of understanding to a previous survey of information technology (IT) security concerns and issues in global financial services institutions (GFSI).Design/methodology/approachThis paper uses data obtained from a secondary source. The dimensions of national culture used in this paper come from Hofstede's work. Two analyses are performed on the data. First, a non‐parametric test is conducted to determine whether there are significant differences on the 13 IT security concerns when the dimensions of national culture are used to group responses. Second, a correlation analysis is carried out between the study's variables.FindingsFirst, the results indicate that the dimensions of national culture are not statistically important in differentiating responses and perceptions of IT security concerns across GFSI. Second, some of the dimensions of national culture are found to have significant correlations with a few of the IT security concerns investigated.Research limitations/implicationsThe use of a secondary data source introduces some limitations. The views captured in the survey are those of management team, it is likely that end‐users' perceptions may vary considerably. Nonetheless, the main finding of the paper for corporate managers in the financial services industry is that IT security concerns appear to be uniform across cultures. Further, the data show that the dimension of uncertainty avoidance deserves further attention with regard to the assessment of security concerns in GFSI. This information may be useful for decision making and planning purposes in the financial services industry.Originality/valueThis paper is believed to be among the first to examine the impacts of national culture on IT security concerns in GFSI. The paper's conclusions may offer useful insights to corporate managers in the industry.

Policy framework for security and privacy management

Policies that address security and privacy are pervasive parts of both technical and social systems, and technology that enables both organizations and individuals to create and manage such policies is a critical need in information technology (IT). This paper describes the notion of end-to-end policy management and advances a framework that can be useful in understanding the commonality in IT security and privacy policy management.