Risk model development for information security in organization environment based on business perspectives

Ibnugraha, Prajna Deshanta; Nugroho, Lukito Edi; Santosa, Paulus Insap

doi:10.1007/s10207-020-00495-7

Cited by 4 publications

(3 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Avoiding perceptions of unfair decision-making may be ideal, but it is not feasible for all companies, such as those with highly complex internal operations or that justifiably worry about information leakages (Ibnugraha et al, 2021). When these extraordinary circumstances arise, employees should be aware of the risks associated with letting their self-damaging ruminations 29 escalate into complacency about reporting problem situations (Morrison, 2011), and managers should help them realize and avoid that situation.…”

Section: Practical Implicationsmentioning

confidence: 99%

Unfair, uncertain, and unwilling: How decision-making unfairness and unclear job tasks reduce problem-focused voice behavior, unless there is task conflict

Clercq

Pereira

2023

European Management Journal

View full text Add to dashboard Cite

Section: Practical Implicationsmentioning

confidence: 99%

Unfair, uncertain, and unwilling: How decision-making unfairness and unclear job tasks reduce problem-focused voice behavior, unless there is task conflict

Clercq

Pereira

2023

European Management Journal

View full text Add to dashboard Cite

“…The previous studies commonly use specific perspectives to perform those steps. From a business perspective, the risk of the threat level is estimated by several metrics such as financial view, reputation, organization size, organization type, and critical level of information [13].…”

Section: A Literature Reviewmentioning

confidence: 99%

The Reliability Analysis for Information Security Metrics in Academic Environment

Ibnugraha

Satria

Nagari

et al. 2023

JOIV : Int. J. Inform. Visualization

View full text Add to dashboard Cite

Today, academic institution involves digital data to support the educational process. It has advantages, especially related to ease of access and process. However, security problems appear related to digital data. There were several information security incidents in the academic environment. In order to mitigate the problem, metrics identification is required to determine the risk of incidents. There are many risks model and metrics to estimate the risk, such as DREAD, OWASP, CVSS, etc. However, specific metrics are required to obtain appropriate risk values. Therefore, this study aims to define metrics for an academic institution. The proposed metrics are obtained from The Family Educational Rights and Privacy Act (FERPA) regulation. It consists of directory information, educational information, personally identifiable information, and risk of information leakage. In order to achieve the objective, this study involves survey and reliability analysis to result in output. The survey is conducted by involving 90 respondents with various levels of education and jobs. The Cronbach's alpha and Test-retest are methods to determine this study's reliability. According to reliability analysis, the Cronbach's alpha method results in coefficients for the metrics between 0.730 - 0.911, while the Test-retest method results in coefficients between 0.630 - 0.797. These coefficients have a reliable category, so the proposed metrics are adequate for determining risk of information security incidents in academic environments. The reliable metrics will be developed as variables of the risk assessment model for the academic environment in the future study.

show abstract

“…Appropriate and frequently integrated actions provide security models. Currently, special applications are being developed around the round-the-clock monitoring status of the network and the warning of information security systems [35]. Managers should conduct training exercises to avoid accidental data collection by employees.…”

Section: Literature Reviewmentioning

confidence: 99%

An Improved Intelligence Approach to Handling Data Leakage Risks in the Corporate Information Security Process

Kiruthiga¹,

Vaniprabha²,

M³

2020

BIJSCIT

View full text Add to dashboard Cite

onﬁdentialinformationisofgreatinteresttocompetingﬁrms.Thiscausesaggressionandattacks.Many people underestimate the importance of the threat, and as a result, it can lead to collapse and bankruptcy for the company. Even a single case of malpractice can result in millions in damages and the loss of customer trust. Threats are subject to data on organization structure, status, and operations. Sources of such threats are its competitors, corruptofﬁcials,andcriminals.Theyareintroducedwithcertainvalue-protectedinformationandmodiﬁedinorder to cause ﬁnancial damage. Even 20% of such a decision can result in information leakage. Sometimes the loss of companysecretscanbeduetotheinexperienceofemployeesoralackofsecuritysystems.Inthispaper,animproved intelligence approach to handling data leakage risks in the corporate information security process is proposed. Accounting automatically calculates weighted relative class systems through a complete, complex security of the most important processes and technical and organizational measures. Their combination is an antivirus system, a ﬁrewall, and protection from electromagnetic radiation. Systems protect information on electronic media sent through communication channels, access exemptions for various documents, create backup copies, and recover conﬁdential information after damage.

show abstract

Risk model development for information security in organization environment based on business perspectives

Cited by 4 publications

References 23 publications

Unfair, uncertain, and unwilling: How decision-making unfairness and unclear job tasks reduce problem-focused voice behavior, unless there is task conflict

Unfair, uncertain, and unwilling: How decision-making unfairness and unclear job tasks reduce problem-focused voice behavior, unless there is task conflict

The Reliability Analysis for Information Security Metrics in Academic Environment

An Improved Intelligence Approach to Handling Data Leakage Risks in the Corporate Information Security Process

Contact Info

Product

Resources

About