Асоціативне поле концепту «інформаційна безпека» у дискурсі медіа-психологічної освіти студентів-журналістів

"This book offers insightful articles on the most salient contemporary issues of managing social and human aspects of information security" - Provided by publisher

The Government and industry are currently using information and communication technology a lot. The Government and companies in Indonesia have regulations on operational standards and management procedures for information and communication systems security at Government regarding implementing information system security. Information security is essential because there are many threats to information security. Information security in this era of Information and Communication Technology (ICT) is fundamental. Information Exchange Environment (IEE) vulnerabilities have increased as threats become more widespread and complex; therefore, information security has become a fundamental problem for businesses, organizations, and governments. So, in this paper, we will explain the review of the impact of Information Security For Government and companies in terms of threats and types of information security. Some security system methods are analyzed, among others—application Security, cloud security, Cryptography, security infrastructure, Incident response, and vulnerability management. The results of this review analysis, it known threat has several solutions, each depending on the type of threat for both the Government and the Company. Furthermore, Information Security is considered very important, especially for data stored in Government and companies.

This article provides the modern cybersecurity trends directly related to aim ant tasks of criminals. It reflect the assessment of global technological risks discussed at 2020 World Economic Forum. The article covers estimations on increase on negative impact of geopolitical sharpness elements on economic potential of next generation technologies. Data fraud and cyberattacks are considered as priority key indicators at assessment of the most possible global risks, and attacks at informational infrastructure are equal to the cyberattacks risks at the rating of the most possible risks. Forecast indicates that cyberattacks are the most likely to be used as indirect conflicts between countries which look forward to expand their range on influence. In such situation the cybersecurity issues can`t stay on the second place or be the issues which should be solved at existence of direct cyber threats to the modern informational systems, IoT systems and SCADA. Obviously, we should revise the approaches to creation and development of modern informational technologies and cybersecurity issues should be considered as constituent element in development of modern informational systems from the very moment of its initiation, projecting, and on all stages of production and support. Reorientation of informational system developers to creation of new integrated platforms with cybersecurity constituent elements demands the research and implementation of new approaches to its development, as well as engagement of the world community at elaboration of relevant standards and protocols, which ensure the secure functioning of informational systems at world net. The article provides the basic requirements to constituent elements at development of concept of informational and cyber security in conditions of hybrid threats especially provides recommendations on organizational structure for informational security department and general principles to organize the activities and controls on informational and cyber protection. The article defines tasks for informational security department, provides the list of basic actions to secure information, and formulates the tasks, which should be ensured by technical infrastructure, organizational, procedural and hardware and technical actions to manage the informational security, and other principles to ensure informational security in development of concept of informational security within the hybrid threats conditions.

The purpose of this paper is to inquire if the young and future financial auditors are fully aware of the impact that information security has on audit missions, focusing also on the responsibilities of the participants in financial audit missions, regarding the assessment of the risks derived from information security. To determine the extent to which audit risk might be influenced by information security, a literature review was conducted, that has focused on this current concern, as expressed by different researchers, professional bodies, Big Four companies and the regulators. In order to assess the current level of awareness regarding the impact of information security on the audit risk, 25 young professionals have participated to a survey and with their answers have proven that they realize the impact of information securing on audit missions and the necessity of having sufficient knowledge regarding information technology in order to identify the risk from the information security area which might affect the financial statements and the activity of the organization. Moreover, young and future financial auditors are aware of the fact that the audit profession will suffer modifications due to the changes in the information technology field, which will affect the approaches in audit missions and in this regards the financial auditors must develop new working skills such as understanding information systems and information security and possessing skills in analysis and data modelling. Besides the survey used, five auditors who work in Big Four companies were interviewed, in order to highlight the way in which the profession is adapting to technological changes, especially in the case of assessing controls of information technology systems and information security. From the results of the interview it can be concluded that within the Big Four companies, there is a high level of awareness regarding the necessity of solid knowledge in the information technology field. The paper is the first to examine the perception of young and future financial auditors from Romania, regarding the impact that the information security has on audit missions.

Subject. In the modern information society, ensuring information security is one of the key tasks of organizations, especially in the context of growing cybersecurity threats. Every year, companies face increasingly complex and diverse threats that can cause significant damage to both the financial resources and reputation of the organization. In this context, ensuring information security becomes an important strategic task for enterprises in various fields of activity. Information security plays a critical role in protecting information confidentiality, ensuring the integrity and availability of information, as well as the security of information systems and networks. Goal. The main goal of the research in this work is a comprehensive study of the technology for ensuring the protection of information, preventing unauthorized actions with it, in particular, its use, disclosure, distortion, modification, research and destruction, as well as the correct strategy for information protection of data from external and internal threats. Method or methodology. The research is based on general scientific methodology, which involves the use of a systematic approach and general scientific methods of cognition. The results of the work. In the course of the study, the authors of the article tried to resolve the problem of the interdependence of information security and the strategy for information protection of data from external and internal threats by structuring the subject area of information security policy, which made it possible to set priorities in solving the problems of ensuring the required level of security of information resources and supporting infrastructure in the context of the development of digital technologies. When analyzing problems related to information security, the authors note the importance of mechanisms for generating new solutions that allow, at a minimum, to adequately respond to threats to information security or to anticipate new threats and be able to resist them. Conclusions. The study found that information security plays a critical role in the modern world, ensuring data protection, privacy and sustainability of business processes. In an environment of constantly changing and evolving threats, maintaining a reliable information security system becomes an integral part of the success of organizations and personal security. This is an important step towards creating an information security management system at the enterprise, with the help of which constant and effective monitoring of the effectiveness of security measures is carried out, timely correction of actions taken and revision of existing provisions to ensure maximum security.

The article is devoted to the research of legal and organizational principles of ensuring information security of states in the modern conditions of development of information society. Theoretical approaches to the definition of the essence of «information security» and «national security» are analyzed and their interrelation is proved. The urgency of the chosen topic of scientific research is caused by the fact that confrontation in the information sphere becomes a fundamentally new sphere of competition between the states. The rapid pace of development of information and communication technologies, creation of a global information space has led to many cybernetic threats in important spheres of political, economic, social and cultural life of society. The paper presents the results of the analysis of information security of the state as a factor of influence on the national security of the state as a whole, and thus defines information security as an integral part of national security. Given the magnitude of the global information challenge, the inability to address these issues through the efforts of individual states, the article explores the issue of international cooperation in providing international information security within the United Nations. The contents of the basic international legal acts adopted by the UN General Assembly, which indicate the threats to the international security of the information space and the need for the states to take joint action to counter the challenges in the field. Particular attention is paid to the peculiarities of regional cooperation of states in providing information security within the European Union. It is determined that this area of EU activity is one of the priorities for today. The main EU normative acts are analyzed, which present the European approach to the problem of information security. The general characteristics of the activities of the special bodies of the EU (European Union Agency for Network and Information Security - ENISA, European Cybercrime Centre), whose activities are aimed at providing information security, are given. The article explores the issues of guaranteeing information security of Ukraine and protection of the national information space. The types of real and potential information threats to the information space of Ukraine are revealed, as well as practical recommendations are given on improving the state information policy and creating an effective system of counteracting cyberspace threats. Emphasis is placed on the fact that state information policy should reflect urgent issues that have arisen in the international information and information security sphere. Effective implementation of strategic priorities, basic principles and tasks of the state information security policy requires improvement of legal and organizational mechanisms of information security management.

Information security is an asset that has value so it must be protected, along with increasing assets it is undeniable that many people wish to gain access and control it so that behind the convenience in the digital world there are many risks to information assets. There are several cases that occur related to information security such as data theft, illegal access, information leakage and vandalism where this becomes the privacy of the user. So it is necessary to do research from the user's perspective to measure the level of information security and privacy awareness of students and lecturers as well as recommendations that will be suggested based on the results of measuring information security and privacy awareness. The objects in this research are students and lecturers at the XYZ University. The method used is Multiple Criteria Decision Analysis (MCDA) by measuring the dimensions of knowledge, attitude, behavior in six areas of information security and three areas of privacy. Data were obtained by distributing questionnaires using a Likert scale of 5. Based on the questionnaire from the respondents, it can be seen students and lecturers have awareness that is at a "good" level of 85% in information security while privacy is at a "good" level with a result of 89% but in the behavior dimension there are several areas that are included in the "average" level including the area passwords by 62%, mobile equipment area by 77% incident area by 70% and on privacy security on the behavior dimension there is one area namely the login activity area by 78% so this needs to be given recommendations for improvement in order to reach a "good" level by providing socialization/ training for students and lecturers

The article based on current legislation from the standpoint of adaptation of the national legal framework to the requirements of the European Union considers the protection of information in the context of information security. The methodology of scientific research based on factor, causal analysis, aimed at identifying the circumstances for a comprehensive and systematic study of the nature of the impact of information protection on information security. The relevance of the study is due to the impact of the development of information and communication technologies on information protection in the context of information security. It is noted that information security covers the protection of confidentiality and ensuring the state of protection of constitutional rights and freedoms of man and citizen, provides access to and use of information, raising questions about the protection of information. Information protection ensures the integrity, reliability, accuracy and completeness of information. Regulatory and legal regulation of information protection includes norms that regulate public relations that arise in the process of information interaction between individuals and legal entities and the state. It pointed out that the development of the digital economy has necessitated amendments to the legal regulation of information protection, which does not have time to adequately respond to changes in technological and social aspects in society. The need to protect trade and professional secrets, state secrets, insider information, personal data is emphasized. Based on the analysis of the implementation of information protection to ensure the confidentiality of restricted information in the context of information security, a number of patterns are identified, which are taken into account in determining trends in information protection. It is stated that the protection of information should be regulated for all types of restricted information.

An effective strategy for managing the national information security with capabilities to resist information threats significantly impacts its further development. This study aims to assess the level of threat to the information security of countries based on the integral index. It is proposed to use five indicators characterizing individual areas of information security and 37 world development indicators, selected from the World Bank database. Correlation analysis selected 12 out of 37 development indicators relevant to security indicators for which the correlation coefficient exceeded 0.5 or –0.5. The Harrington-Mencher function is proposed to determine the information security threat index. Nonlinear normalization was carried out to bring the initial data to a comparable measurement. Canonical analysis was performed to determine the indicator weights. The data from 159 countries were taken for 2018 to assess the index. The result was presented on the map showing countries’ distribution by the information security threat index, thus forming five groups. The group with a “very well” resistance to threats includes economically developed countries with a high level of information security. The “well” group was formed by new industrial and developing countries with economic potential sufficient to prevent information threats and combat their consequences. The information security level in developing countries, where the results of overcoming information threats will affect the economic sphere, is defined as “acceptable”. Countries with a low level of development and information security formed groups designated as “bad” and “very bad”, which indicates a high level of threats to their information security. AcknowledgmentThis work is carried out with in the tax payer – funded researches: No. 0118U003574 “Cybersecurity in the banking fraud enforcement: protection of financial service consumers and the financial and economic security growth in Ukraine”.

Quantum computers differ from traditional computers because unlike traditional computers that use and process information in bits (0 or 1), the unit of information in quantum computers is the quantum bit, or qubit, that can represent additional states beyond ones and zeros at the same time. The additional states called superimposition and entanglement facilitate phenomenal processing speed of quantum computers. The emergence of quantum computers has raised many concerns in various areas of information security. This paper employs a literature survey methodology to elucidate the positive and negative impacts of quantum computers on information security. This paper further addresses the concern that quantum computers will negatively impact information security by examining all recommended information security and privacy controls of the NIST SP 800-53 Rev. 5 catalog of controls. Furthermore, the paper briefly outlines the recent work towards quantum-resistant standards.

Although three types of the information security measures (technical, physical and managerial ones) are all together critical to maintaining information security in the organizations and should be implemented at the same time, this study aims at providing theoretical basis of establishing and implementing effective managerial security measures. The rationale behind this research objective is that it is very important to effectively perform the managerial security measures to achieve the target performance level of the technical and the physical security measures because main agents of practicing the information security measures in the organizations are staff members even though the technical and the physical ones are well constructed and implemented. In particular, this study intends to develop and propose the theoretical model applicable to providing the way of improving organizational members’ intention to use information security technologies since the very intention to use them is essential to effectively establishing and promoting managerial security measures. In order to achieve the objective of this study, the factors critical to influencing upon the intention to use information security technologies are derived through systematically reviewing related theories and previous studies, and then the research model and hypotheses are proposed by logically reasoning the casual relationship among the these factors. Also, the empirical analyses are performed by conducting the survey of the organization members of domestic large companies and analyzing the structural equation model by PLS (Partial Least Squares) method. The significant results of this study can contribute to expanding the research area of managerial information security and can be applied to suggesting the practical guidelines for effectively establishing and implementing the managerial security measures in various organizations.

This study discusses the evaluation of information security at Benyamin Guluh Kolaka Hospital Using the KAMI Index 4.2 with ISO 27001:2013. This study emphasizes two areas of the KAMI Index 4.2 assessment, namely the first area of information security governance, and the second area of technology and information security. This study aims to determine the level of completeness and maturity of information security by evaluating the KAMI Index 4.2 with ISO 27001: 2013 standardization on Benyamin Guluh Kolaka's SIM-RS service. The results of this study indicate that the level of completeness and maturity of information security is still at level II, which means it is still classified as "Not Eligible". In this study, the authors found several existing gaps following ISO 27001: 2013 standards and recommendations have been given for the improvement of the Benyamin Guluh Kolaka Hospital.

The necessity of formation of an effective information security system of the enterprise is substantiated. It is emphasized that when designing an information policy, the firm must comply with the requirements of the current legislation, take into account the level of technical support, especially the regulation of employees' access to confidential information, etc. It is stated that the costs of organizing information security measures should be appropriate to its value. The article identifies major threats that could be breached by confidential information. The list of the main normative legal acts aimed at bringing to civil, administrative and criminal responsibility for illegal collection, disclosure and use of information constituting a trade secret. The main stages of building an information security policy are summarized, the most common types of information threats related to the use of modern computer technologies are described. The necessity of developing a domestic original accounting (management) program that could be used in the long term by the vast majority of Ukrainian enterprises is pointed out. There are three groups of tools that are applied in the theory and practice of information security of the enterprise (active, passive and combined), emphasizing the need for planning and continuous monitoring in real time of all important processes and conditions that affect data security. It is noted that even if the information security system is built taking into account all modern methods and means of protection, it does not guarantee one hundred percent protection of the information resources of the enterprise, but a well-designed information security policy allows to minimize the corresponding risks. Key words: information security, information policy, information security, confidential information, information threats, information and communication technologies, software.

The paper discusses the security aspects of financial portal information, and proposes a mechanism for creating an information protection module in the information system in financial institutions based on artificial neural networks. An information protection system with adaptive features needs to be developed to ensure information security and rapid response. The paper presents an approach that can be used to assess the security level of the information system of financial portals. The security level is defined as the ratio of the risks of a protected system to the risks of a vulnerable system. The methodology is based on a systems risk assessment approach. The risk-based approach is implemented in many areas of information security, as it allows to describe information resources more accurately, based on their characteristic weaknesses, the value, risks and, consequently, the level of criticality for the organization's activities.Based on the approach, the security of the system is determined by the ability to use access control and management tools, as a result of which, the user registered in the system will have access to the information with the necessary restrictions ensuring their unconditional use.

The advent of the era of digital information, vast amounts of data is gradually affect people's way of life, work and study habits, etc., bring convenience to people at the same time, also make people face a lot of information security threats and challenges, so the information security problems faced by big data era is of great significance. This paper first analyzes the current big data era background, on the basis of the key problems of personal information security, analysis of information security risks at the same time, put forward the issue of information security strategy.