ipl-logo

Information Security Breach Paper

1724 Words7 Pages

1. Introduction
Nowadays, information security becomes an important thing for the organization because the data and information is one asset that has a high economic value. This is demonstrated by the many security breaches continues to increase, both in terms of the number of incidents as well as financial losses. In 2014, PWC's survey stated the number of incidents of security breach incidents as much as 42,800,000 or 48% greater than in 2013, while the total financial losses increased by 34% compared to the year 2013 (pwc.com, 2014) [1].
Currently institution or organization must remain vigilant in the face of evolving threats. Many agencies and organizations recognize the importance of information security as one of the parts of the business …show more content…

Open Security Foundation released a survey which stated that as many as 35% of security breaches occur on Educational Institutions (opensecurityfoundation.org, 2014). Educational institutions are targeted by people who are not responsible because these institutions are a storehouse of personal data. Survey of IT leaders shows the challenges for the future education institutions, one of which is to protect the personal data of students, organizations and intellectual property that tops the list at 79% (edtechmagazine.com, 2014).
Based on Id-SIRTII source, in Figure 1 shows that the attack on the academy website (ac.id) in 2013 amounted to 18.98%, this figure has second position after the government website (go.id) that is equal to 27.42% [3]. Because the number of threats that occur in Educational Institutions and it continues to increase each year, the researchers want to know the information security risks in the scope of Higher Education in Indonesia, especially Bandung, with coverage of Academic Information Systems, because in this system a lot of data and critical information is …show more content…

Description of Likelihood Scale

For ease exploitation (vulnerability), its value refers to the value range of NIST standard SP 800-30. Low category (where a value of 0) means that the small vulnerability or appropriate security controls have been implemented completely. Medium with a value of 1 means that the vulnerability is moderate and appropriate security controls done partially. High with a value of 2 means that the vulnerability must receive attention and will result in an adverse impact, the relevant security controls are not implemented.
To obtain risk value then we use a risk matrix values as shown in Table 3, which adopted from ISO 27 005: 2011. For example, asset X with a value of 2 or Medium (M), with the threat of the possibility of threat Y with High category (value 2) and the vulnerability of asset X to Y is Z with the threat level M with a value of 1. Therefore, the value of the risk is = X + Y + Z = 2 + 2 + 1 = 5.
After getting the value of risk then that value be categorized into three namely Low Risk (value rsiko 0-2), Medium Risk (3-5) and High Risk (6-8) [4].

Table 3. Risk Value Matrix in ISO 27005:2011 Likehood of occurence-Threat Low Medium High Ease Of Exploitation L M H L M H L M

Show More
Related
223 Words | 1 Pages

The Information Security Manager reports in their capacity to the CEO. Company officers, executives, directors, employees, contractors and third party service providers cooperate and work with the Information Security Manager to ensure the protection of customer’s non-public information and Licensee’s Information Assets. Policies, such as Enterprise Antivirus Program, Network Access, Software Development Security Standards, Physical Security, Vendor Manangmenet Ativirus, Mobile Computing/Remote Access, Inromation Security Risk Assessment, Social Media, Data Loss Prevention, and Secuiryt Incident Response Policies have been implemented to protect customer’s non-public personal information and company Information

Read More
1670 Words | 7 Pages

Marques Underwood INSS 391 Security and the Future With the transition of companies leaning towards advancing through the usage of big data, cybersecurity and the trends in technology are creating an increase in threats. The goal is to protect the databases and devices used at these companies before they are hacked and compromised for unwanted reasons. We’ll see the general concerns with security in the IT field, and steps that specific companies are taking to prevent and adopt to the landscape of the future in security. Devices are increasing at a rapid pace these days, meaning the more data is being expanding.

Read More
983 Words | 4 Pages

The ISMS ensures that the security arrangements are fine-tuned to keep pace with changes to the security threats, vulnerabilities and business impacts. • Set up a policy for information protection and information security incident

Read More
1476 Words | 6 Pages

Now focusing on cyber security and communication security which are the following parts that make up the national security. Each one of these parts are responsible for a specific function. Cybercrime is attacking the information systems, sometimes identity theft, but in some cases fraud. By providing insight into causes of cybercrime, its participants their motivations, then we identify some of the major issues dealing with these crimes. With cybercrime being nondiscriminatory, also dramatically increase.

Read More
1097 Words | 5 Pages

Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2013). Computer security incident handling guide. International Journal of Computer Research, 20(4), 459. Wang, P., González, M. C., Menezes, R., & Barabási, A. L. (2013).

Read More
915 Words | 4 Pages

The online dating service that goes by the slogan “Life is short. Have an affair.” , Ashley Madison, was recently hacked resulting in a breach of all their customers’ private data. Run by parent company, Avid Life Media, Ashley Madison is a website where people can seek extramarital affairs. Over 37 million accounts had been registered through this website prior to the hack and the names, addresses, emails, message history and credit card information of all these members were stolen and publicly released by the hackers.

Read More
908 Words | 4 Pages

The risk management process establishes the methodology for risk enterprises framework for the of many businesses (Fraser & Simkins, 2010). A retail business such as Target needs to do a risk assessment to establish the types of risks being faced by the organization. The risk assessment process starts with the identification and categorization of risk factors. High customer interaction of the retail businesses like Target, need to identify risk as a continuous basis effort over the lifetime of the business (Mandru, 2016). It important that the business leaders, set goals and priorities for the risk management system.

Read More
749 Words | 3 Pages

Therefore if the company protects its services, people, suppliers, community and customers or the stakeholders, they will feel safer. In the digital business arena, information security is imperative, the protection of everything that has an impact on the company’s digital footprint effects every part of the stakeholders operations. Spending money on security services or products is an investment into the stakeholder’s interest. Social contract plays a critical role in cybersecurity products and cybersecurity services in its core definitions.

Read More
1178 Words | 5 Pages

Organisations can better prepare for and respond to cyber assaults by following the framework's rules and best practises, lowering the risk of damage to their essential assets and reputation. The NIST incident response framework is a complete framework comprised of five phases: preparation, detection and analysis, containment, eradication, and recovery. Each phase is intended to cover specific tasks and activities that organisations must carry out when responding to crises. The framework emphasises the necessity of planning, which includes designing incident response policies, processes, and plans as well as performing employee training and awareness programmes.

Read More
913 Words | 4 Pages

For operational purposes, the company collects and stores confidential information about their customers, employees, suppliers, and vendors. For purposes of their rewards program, the company collects sensitive and confidential consumer information. Although security measures and information technology systems have been put in place to ensure secure transmission and storage of confidential information, security breaches, computer viruses, or even human error can occur. Any of these events could cause data to be lost or stolen, as well as disclosed and used with malicious intent. Such occurrence could lead to litigation, fines, increased security costs, and damage to

Read More
1093 Words | 5 Pages

These partnerships create an environment to share critical threat information, risk mitigation, and other vital information and resources” (DHS, n.d.). This is, in my opinion the best way to combat these vulnerabilities. It is essential that these private companies work with the DHS and allow them to conduct vulnerability assessments. Without the use of these assessments, then a company may not know where it stands. And with the growing threat of cyber-attacks, it is essential that our infrastructure be protected.

Read More
1548 Words | 7 Pages

The overall cooperation within organization, stakeholders and individuals in cyber security is essential. And the development of the cyber security is much more expensive and requires more financial and human resources than cyber warfare itself. The cyberattack can be launched without involvement of significant amount of money or people, but the cyber security requires ambitious involvement of

Read More
636 Words | 3 Pages

Purpose This document is intended to address the importance of having a written and enforceable Information Technology (IT) security policy, and to provide an overview of the necessary components of an effective policy. The reader will gain an understanding of the basic processes, methodologies, and procedures needed to initiate the development of an organization-wide IT Security Policy. When developing an IT Security Policy you should keep in mind the ‘defense in-depth ‘model. In other words, you should not be relying on one principal means of protection (or layer), instead, you should develop your security program so that it provides multiple layers of defense.

Read More
777 Words | 4 Pages

First I would like to say assessing risk is a complex trouble. it is ever changing and fluid. individuals who plan to do damage will usually adapt to conquer countermeasures which are hired against them. It’s generally time that limits how fast they adapt. with regards to risk assessments i really like objective measurements.

Read More
1362 Words | 6 Pages

Emerging Threats: Homeland security must stay ahead of emerging threats, such as emerging infectious diseases, bioterrorism, and advanced cyber threats. Anticipating and preparing for these evolving risks requires ongoing research, scenario planning, and the ability to adapt

Read More

More about Information Security Breach Paper

Related Topics

Open Document