Balancing software and training requirements for information security

Investigation of IS professionals’ intention to practise secure development of applications

This study examined the effects of six organizational socialization tactics on new information systems (IS) professionals' role adjustment and organizational attachment. Data were collected from 187 newly hired IS professionals. The results showed that the six socialization tactics affected new IS professionals differently. Investiture tactics affected directly all the variables studied except role ambiguity. Serial tactics had a direct and positive effect on continuance commitment but a negative effect on intention to quit. Both sequential and collective tactics had direct effects on role ambiguity. Overall, the social aspects of the socialization process had the most significant effects on new IS professionals' role adjustment and organizational attachment. The results suggest that organizational socialization is an important strategy that needs to be considered in both IS research and practice.

The purpose of information systems (IS) security behavior, represented by the difference between work and personal purpose, has been neglected in the research of user's IS security behavior. This is especially important for the organizations that allow or inevitably allow their employees to do personal tasks during work hours, because it may bring big threats to an organization's IS. Unfortunately, few empirical studies have examined if different behavioral purpose, typically, work/personal purpose, affects users' IS security behavior decision. Based on boundary theory and the idea of multidimensional rationality, we argue that people demarcate a psychological boundary for work and personal usages of IS and thus apply different rationalities to make IS security-related decisions. Our empirical investigation indicates that in a work usage context, people apply rule-based rationality and therefore are more influenced by mandatoriness and facilitating conditions. Whereas in a personal usage context, people apply outcome-based rationality and therefore are more concerned with task benefits and costs. The findings imply that organizations and vendors may devise different measures to ensure users' IS security behavior in different contexts.

HOW MUCH ICT SECURITY HAS IMPROVED DURING THE LAST DECADE

The Government and industry are currently using information and communication technology a lot. The Government and companies in Indonesia have regulations on operational standards and management procedures for information and communication systems security at Government regarding implementing information system security. Information security is essential because there are many threats to information security. Information security in this era of Information and Communication Technology (ICT) is fundamental. Information Exchange Environment (IEE) vulnerabilities have increased as threats become more widespread and complex; therefore, information security has become a fundamental problem for businesses, organizations, and governments. So, in this paper, we will explain the review of the impact of Information Security For Government and companies in terms of threats and types of information security. Some security system methods are analyzed, among others—application Security, cloud security, Cryptography, security infrastructure, Incident response, and vulnerability management. The results of this review analysis, it known threat has several solutions, each depending on the type of threat for both the Government and the Company. Furthermore, Information Security is considered very important, especially for data stored in Government and companies.

Ensuring information security in public sector information systems is now more important than ever. Advances in technology and information have not only made daily life easier, but also made the opportunities for cybercrimes vast and inevitable. This study aims to create a framework for evaluation that measure the maturity level of information security in information systems by integrating existing frameworks, NIST Cybersecurity Framework (CSF) and COBIT 2019. The result of this framework development is implemented in a public sector organization called PT XYZ, which has an information system as a tool to assist in the implementation of public services. The Capability Maturity Model Integration (CMMI) method is used to calculate the maturity level. The implemented approach resulted in information security maturity evaluation framework for information systems. This framework includes 118 activities which are divided into 23 categories. The distribution of the integration of the two frameworks contributes 61% activities, the NIST CSF contributes 8% and the COBIT 2019 framework contributes 31% activities. The measurement result of the information security maturity level in the information system at PT XYZ shows that all functions are at level 1 or the initial level. PT XYZ's low information security maturity reveals the critical need for stronger data protection and system resilience. This study introduces a novel approach to demonstrating a practical methodology for integrating two frameworks. The resulting framework enables public sector organizations to assess their security posture, identify areas for improvement, and enhance resilience against cyber threats, strengthening public service and safeguarding data.

Knowledge, skills and abilities of information systems professionals: past, present, and future

:Keeping satisfied information systems (IS) professionals at the entry level has become a difficult task for IS managers. Financial incentives have led to escalating costs without widespread improvement of the situation. To capitalize on nonfinancial rewards, organizations must understand the relationships between employees’ internal desires, the environment fostered by the organization, and career satisfaction. This paper is a report on a study of 101 entry-level IS professionals. The data analysis indicates that IS professionals find more satisfaction with their career when supervisor support is prominent and an adequate range of opportunities that satisfy career desires exist within the organization.

Burnout is a unique type of stress syndrome. Although it has been shown to be potentially very costly in the helping professions, such as nursing, education, and social work, little work has been done to apply the concept to technical professionals such as information systems (IS) professionals. Given the nature of information systems development, we believe that burnout can be a potential problem for IS professionals. the study described herein examined the levels of burnout among a group of IS developers in the United States. the results indicated that the levels of burnout among IS professionals differ according to their job types and work contents.

The features of the functioning of the on-board information systems of a car are considered. Threats to their security are analyzed, and methods for ensuring information security and functional security of on-board information systems are proposed. The design of road networks in the organization of road traffic is one of the factors in ensuring the functional security of modern intelligent transport systems, that is, compliance with such information security attributes as data confidentiality, integrity, availability, authenticity and novelty of data. The security of on-board vehicle information systems is a critical issue in the modern world, as more and more vehicles are equipped with electronic systems that may be vulnerable to cyber attacks. One of the main challenges of protecting on-board information systems is the wide range of devices and technologies used in modern vehicles. Different systems may have different security requirements and vulnerabilities. They may interact with each other in a complex way. Another challenge is that many of these systems were not designed originally with security in mind. They may lack basic security features such as encryption and authentication and use outdated software and protocols that are vulnerable to known attacks. The main types of attacks and threats to the elements of the transportation system that interact with the VANET were identified to analyze the information security of vehicle in-vehicle systems. Based on the theory of fuzzy sets under conditions of uncertainty and using the Fuzzy Logic Toolbox in the integrated Matlab environment, the level of information security of the OBU-VANET system was modeled. The obtained results allowed us to formulate the degree of information security of vehicle operation elements against unauthorized access to data. The results of the study showed that technical communication systems have the highest security level (> 0.7), and vehicles become the most vulnerable in public places.

Human resource management is an important issue in the Information Systems (IS) discipline because of several factors -the rapidly changing technologies, the fact that end users tend to look to the IS staff to provide the tools and techniques necessary to effectively compete in today's economic and business environment. Demographic changes in the labor force have also been projected for the years beyond 2000. The Bureau of Labor Statistics forecasts that women and non-Whites would form the majority of the productive population The IS profession is projected to grow at the astonishing rate of 120% annually. Consequently, it is important to examine the expected work goals of female versus male IS professionals. This study uses Hofstede's (4) typology of culture to examine the work goals of female IS professionals versus those of male IS professionals. Gender differences in work goals have been attributed to the upbringing and cultural background of individuals. The results indicate that male and female IS professionals generally have similar work goals. Males perceived advancement, variety and high earnings as more important factors

Much of our prior knowledge of information systems (IS) usage is based on its acceptance or continuance without understanding whether users are likely to use the IS or not. Prior models of IS usage provide a limited understanding of one's intention to use the IS, given that IS usage or continuance does not necessarily suggest the subsequent use of the IS. Even if people use particular IS, there is no guarantee that the users always use the IS. This study proposes an IS usage intention model based on the information asymmetry theory to compliment previous studies that mostly focus on IS usage or continuance without considering the possibility of its use. For IS usage research, this paper proposes one of the earliest usage models of IS. For practitioners, this study provides some guidelines for IS manufacturers on how to derive the most return on their system development efforts with a successfully high usage rate in the market for their newly usage systems.

The information systems (IS) profession is one of the fastest growing occupations and the demand for IS professionals is expected to continue growing over the next several years [3]. However, many sources report a growing gap between the demand for IS workers and the supply of such workers [3]. Further exacerbating this gap is the fact the percentage of women earning degrees in the field has declined since 1986 [5]. In order to adequately staff the IS profession, we need to make sure that a sufficient number of both male and female students are completing information systems degrees. Low grades in the early required classes account for much of the attrition of women from scientific and mathematics classes [9]. Therefore, one of the ways to ensure students complete an information systems degree is to assure success in the early information systems classes.This paper proposes a way to predict academic performance in the first college-level information systems class. In earlier research [8], we developed a model to measure performance in this class based on models used in accounting classes [6]. When we used this model we found different patterns than had been found in accounting classes. Our results showed that the Eskew and Faley [6] model predicted male student performance in the class but did not predict female performance. In this paper, we extend the model to try to improve the prediction. This model will be compared for male and female students. We hope to show what determines performance and thus better understand how students of both genders can be successful in the first college-level IS course.

Information Security Management System (ISMS) implementation in Institution is an effort to minimize information security risks and threats such as information leakage, application damage, data loss and declining IT network performance. The several incidents related to information security have occurred in the implementation of the Academic System application in Indonesian higher education. This research was conducted to determine the maturity level of information security practices in Academic Information Systems at universities in Indonesia. The number of universities used as research samples were 35 institutions. Compliance with the application of ISO 27001:2013 standard is used as a reference to determine the maturity level of information system security practices. Meanwhile, to measure and calculate the level of maturity using the SSE-CMM model. In this research, the Information System Security Index obtained from the analysis results can be used as a tool to measure the maturity of information security that has been applied. There are six key areas examined in this study, namely the role and importance of ICT, information security governance, information security risk management, information security management framework, information asset management, and information security technology. The results showed the level of information security maturity at 35 universities was at level 2 Managed Process and level 3 Established Process. The composition is that 40% of universities are at level 3, and 60% are out of level 3. The value of the gap between the value of the current maturity level and the expected level of maturity is varied for each clause (domain). The smallest gap (1 level) is in clause A5: Information Security Policy, clause A9: Access Control, and clause A11: Physical and environmental security. The biggest gap (4 levels) is in clause A14: System acquisition, development and maintenance and clause A18: compliance.  Â

Information systems (IS) use, the dominant theoretical paradigm for explaining how users apply IS artifacts toward goal attainment, gives primacy to human agency in the user–IS artifact relationship. Models and theorizing in the IS use research stream tend to treat the IS artifact as a passive tool; lacking in the ability to initiate action and accept rights and responsibilities for achieving optimal outcomes under uncertainty. We argue that a new generation of “agentic” IS artifacts requires revisiting the human agency primacy assumption. Agentic IS artifacts are no longer passive tools waiting to be used, are no longer always subordinate to the human agent, and can now assume responsibility for tasks with ambiguous requirements and for seeking optimal outcomes under uncertainty. To move our theorizing forward, we introduce delegation, based on agent interaction theories, as a foundational and powerful lens through which to understand and explain the human– agentic IS artifact relationship. While delegation has always been central to human–IS artifact interactions, it has yet to be explicitly recognized in IS use theorizing. We explicitly theorize IS delegation by developing an IS delegation theoretical framework. This framework provides a scaffolding which can guide future IS delegation theorizing and focuses on the human–agentic IS artifact dyad as the elemental unit of analysis. The framework specifically reveals the importance of agent attributes relevant to delegation (endowments, preferences, and roles) as well as foundational mechanisms of delegation (appraisal, distribution, and coordination). Guidelines are proposed to demonstrate how this theoretical framework can be applied toward generation of testable models. We conclude by outlining a roadmap for mobilizing future research.