Managing Information Security Risk Using Integrated Governance Risk and Compliance

Nicho, Mathew; Khan, Shafaq; Rahman, Mohammad A.

doi:10.1109/comapp.2017.8079741

Cited by 9 publications

(4 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Taking into account the advantages of GRC within organizational settings, we have come across several studies that delve into the application of GRC in the realm of information systems. Among these studies, Nicho et al (2017) focused on using GRC for managing information security risk, Mayer et al (2015) contributed to developing the integrated model for IT GRC and an ISO compliant, and Asnar and Massacci (2011) proposed a method for security GRC based on a goal‐process approach. Considering the benefits of implementing GRC to support organizational performance and its application in information systems, we propose its implementation in digital transformation.…”

Section: Literature Review and Hypothesis Developmentmentioning

confidence: 99%

Enhancing banking performance through dynamic digital transformation capabilities and governance, risk management, and compliance: Insights from the Indonesian context

Abdurrahman,

Gustomo,

Prasetio

2023

E J Info Sys Dev Countries

View full text Add to dashboard Cite

Digital transformation (DT) is a crucial strategic initiative for organizations to rectify output, adapt, and keep up with the digital economy. Dynamic capability (DC) is a widely‐used model for managing opportunities and risks from digital transformation. However, there is a lack of research examining the measurement and relationship between the primary activities of dynamic capability and DT, especially within the banking sector. Acknowledging the importance of DC, we propose this research which emphasizes the significance of sensing, seizing, and transforming aptitudes in promoting DT and improving banking performance. Within this study, we specifically investigate the role of governance, risk management, and compliance (GRC) factors. By utilizing structured equation modeling (SEM) and analyzing data from 322 respondents representing 45 banks in Indonesia, our empirical findings demonstrate that all three DC activities have a significant influence on DT, in which sensing activity has the biggest impact, followed by transforming and seizing. Furthermore, we reveal that DT acts as an intermediary between DC activities and banking performance, and GRC factors further enhance the impact of DT on organizational performance. Our research offers valuable insights to assist banks in prioritizing essential capabilities, including GRC, to enhance overall performance through dynamic digital transformation capabilities.

show abstract

Section: Literature Review and Hypothesis Developmentmentioning

confidence: 99%

Enhancing banking performance through dynamic digital transformation capabilities and governance, risk management, and compliance: Insights from the Indonesian context

Abdurrahman,

Gustomo,

Prasetio

2023

E J Info Sys Dev Countries

View full text Add to dashboard Cite

show abstract

“…Thus, governance affects how healthcare organizations address everything, such as daily operations and patient care strategies. If any organizational operation fails, the board of directors and executives are held accountable rather than the policies or organizational culture [9]. Therefore, an accountability issue arises whether external and internal constituencies trust that the healthcare providers are doing everything to protect the quality of care and mitigate risk.…”

Section: A Factors Led To the Emergence Of It Grc In The Healthcare Sectormentioning

confidence: 99%

“…• Strategy: The alignment among healthcare strategy, IT strategy, and IT GRC activities is crucial for integrating IT GRC in healthcare organizations [21]. A study conducted in Swiss hospitals found that IT directors usually make all the decisions without any discussion with related departments in about 75% of the hospitals [1].…”

Section: Research Frameworkmentioning

confidence: 99%

Towards a Strategic IT GRC Framework for Healthcare Organizations

Alharbi¹,

Sabra²,

Alharbe³

et al. 2022

IJACSA

View full text Add to dashboard Cite

The rapidly changing healthcare market requires healthcare institutions to adjust their operations to address regulatory, strategic, and other risks. Healthcare organizations use a wide range of IT systems producing large amounts of sensitive and confidential data. However, few tools are available to measure the data governance activities of healthcare institutions and align healthcare data management with legislation. The Governance, Risk, and Compliance (GRC) Model focused on integrating that ability to achieve organizational goals. The demand for corporate governance is crucial for protecting the healthcare system from risks. An adaptation of a modified version that includes strategy, processes, technology, people, as well as legal and business requirements was developed to analyze the factors affecting IT GRC implementation in healthcare organizations. Although about 48% of participants reported that their organizations implemented IT GRC programs, 16% stated that they are considering implementing IT GRC programs soon. In almost 71% of healthcare organizations, IT governance, risk management, and compliance are integrated. Among the factors influencing the implementation of IT GRC programs in Saudi healthcare organizations, legal context ranked as the most critical, followed by process, strategy, then technology, business, and finally, people contexts. This study shows that healthcare organizations must assess various factors for the effective implementation of IT GRC activities.

show abstract

“…Actualmente la relación entre computadora y humano va reduciendo brechas, lo cual genera consigo una gran necesidad en implementación de seguridad informática. La seguridad informática es considerada un tema de gestión alineado a estándares y buenas prácticas [13], por lo cual requiere de un sistema de autenticación para restringir el acceso de los usuarios a cierta información almacenada en computadores. Dentro de los diferentes tipos de autenticación se encuentra la autenticación biométrica que incluye la detección de una señal biométrica, la extracción de diversas características contenidas en la señal biométrica, y el uso de clasificadores para manejar las características extraídas [14].…”

Section: Introductionunclassified

Sistema de reconocimiento facial para el control de accesos mediante Inteligencia Artificial

et al. 2023

View full text Add to dashboard Cite

El presente artículo tiene como objetivo principal el desarrollo de un sistema que permita el reconocimiento facial de una persona para el control de accesos mediante Inteligencia Artificial. Para el desarrollo del sistema se tuvo como algoritmo Redes Neuronales Convolucionales, el cual es un modelo de reconocimiento. Así mismo se utilizó el lenguaje de programación Python y las librerías siguientes como Numpy, Os, OpenCV e Imutils para su implementación. Los resultados obtenidos según el acierto y utilizando un dataset de 450 imágenes por individuo son de un 88% aproximadamente en cuanto la predicción por persona, concluyendo que el sistema de reconocimiento es eficaz y tiene mayor eficiencia incrementando el tamaño de datasets generados por individuos.

show abstract

Managing Information Security Risk Using Integrated Governance Risk and Compliance

Cited by 9 publications

References 38 publications

Enhancing banking performance through dynamic digital transformation capabilities and governance, risk management, and compliance: Insights from the Indonesian context

Enhancing banking performance through dynamic digital transformation capabilities and governance, risk management, and compliance: Insights from the Indonesian context

Towards a Strategic IT GRC Framework for Healthcare Organizations

Sistema de reconocimiento facial para el control de accesos mediante Inteligencia Artificial

Contact Info

Product

Resources

About