Information Security Integral Engineering Technique and its Application in ISMS Design

This study examines the effect of an Information Security Management System (ISMS) on organizational performance in a Small and Medium Business (SMB), with a focus on Red Mango Ltd. The study employed a correlational survey design to assess the relationship between ISMS implementation and organizational performance. Primary data was collected from 44 respondents, including management and staff, through structured questionnaires. The convenience sampling technique was used for respondent selection, and data analysis was conducted using the Statistical Package for Social Sciences (SPSS) version 25. Correlation and regression analyses were applied to determine the relationship and effect of ISMS on organizational performance. Findings revealed that ISMS is well-implemented at Red Mango Ltd, with clear policies, structured roles and responsibilities, and comprehensive employee training on security measures. Employees are well-informed about acceptable usage of information security systems, and security incidents are promptly reported. However, several challenges hinder ISMS implementation, including leadership issues, technical system difficulties, personnel constraints, and financial limitations. Despite these challenges, ISMS adoption has led to significant benefits, including regulatory compliance, optimized business processes, cost savings, improved information security awareness, enhanced company reputation, and increased productivity. The study further established a strong positive correlation between ISMS implementation and organizational performance at Red Mango Ltd. Regression analysis indicated that a unit increase in ISMS adoption results in a 0.495 increase in organizational performance, confirming its significant impact. The study concludes that effective ISMS implementation enhances security, improves operational efficiency, and contributes to overall business success. Organizations are encouraged to address implementation challenges through leadership commitment, technical capacity building, and financial investment to fully realize ISMS benefits.

News about various information security attacks against companies appears almost every day. The sources of these attacks vary from cyber-criminals who want to steal companies’ data to demand a ransom, to current or former employees who want to create damage to the organization. The best way to defend organizational critical assets is to implement an Information Security Management System that secures all sensitive assets from confidentiality, availability and integrity perspective. An Information Security Management System offers top management a framework for sensitive information flow control. This framework includes with a risk assessment that considers the security threats and vulnerabilities of the company’s assets. Companies usually implement Information Security Management System only after they have a functional quality management system, which brings clarity and optimization to the company’s processes. Current approaches on creation and implementation of effective Information Security Management System are very theoretical and thus difficult to use in practice. The main objective of this paper is to present an Information Security Management System implementation method in the case of a small company by defining the basic steps in achieving a fully functional Information Security Management System. The proposed methodology considers the top management Information Security Management System objectives, organizational context, risks assessment and third parties expectations fulfillment.

The purpose of this study was to investigate and analyze the assumptions and requirements for the implementation of Information Security Management System (ISMS). Methodology: To check assumptions security management system implementation is the population of Tabriz hospitals. Review the requirements and assumptions are based on the standard ISO / IEC 27001, ISO / IEC 27002 test target setting and ISO 27001 standard questionnaire containing 33 questions in 11 control is used. The data were analyzed using descriptive and inferential statistical method that factors in the implementation of information security management system was confirmed. As well as to identify factors contributing to the implementation of information security management system and factor analysis, structural equation model was used PLS smart software that based on its findings to impact and indirect aspects of implementation effectiveness of the system. Results: Using the software, smart-PLS and using structural equation modeling confirmatory factor analysis was performed to measure the test of convergent validity, divergent validity, reliability Security and reliability of observable variables and quality test and measurement model of the 101 comments experts, all the prerequisites and requirements, including information security policy, the organization of information security, asset management, human resources in terms of security, physical and environmental security, communications and operations management, access control, use, development and maintenance, incident management information security, business continuity management and compliance with laws in secure level at %99 is forecast in Tabriz hospitals are effective information security management system. Conclusion: According to prioritize the factors affecting information security management system, operating (after) the most monitors and agents (after) the supply and implementation of information security management system least affected are in Tabriz hospitals.

In the wave of the progressive informatization process, Korean enterprises are making a vast amount and range of investments in the information security sector in order to counter the information dysfunction. In addition, to achieve an objective evaluation thereon, they have been increasingly exhibiting a preference for a certification system of information security management, as developed by the government This study aims to reduce the possible trials and errors while promoting the establishment and certification of the information security management system by enterprises. To satisfy this purpose, this study presents the defects by item found during the certification process of the information security management system of a number of enterprises. By analyzing the derived defects, we have outlined the issues to be attended to among enterprises at each stage of the establishment of an information security management system. The study also presents a reference model for conducting a self check, so that companies may be able to self-verify the completeness of their establishment of the information security management system. Through the results of this study, enterprises will be able to self-verify their completeness levels when promoting the establishment and certification of the information security management system, and improve the efficiency and effectiveness thereof so as to raise the general level and awareness among enterprises of the importance of information security.

Citation (2023), "Index", Tyagi, P., Grima, S., Sood, K., Balamurugan, B., Özen, E. and Eleftherios, T. (Ed.) Smart Analytics, Artificial Intelligence and Sustainable Performance Management in a Global Digitalised Economy (Contemporary Studies in Economic and Financial Analysis, Vol. 110B), Emerald Publishing Limited, Bingley, pp. 265-276. https://doi.org/10.1108/S1569-37592023000110B018 Publisher: Emerald Publishing Limited Copyright © 2023 Pallavi Tyagi, Simon Grima, Kiran Sood, B. Balamurugan, Ercan Özen, and Thalassinos Eleftherios INDEX Accounting, 146 Actual economic activity, 175 Administrative security controls in SME, current state of, 35–37 Africa, effect of COVID-19 debt accumulation, 165 Agriculture, 133 Alternative finance models, 102 Amazon (technology company), 98 Annual appraisals, 252 Anti-black Money Act (2015), 126 Anti-money laundering (AML), 60, 172 Apple (technology company), 98 Artificial intelligence (AI), 23, 85–86, 172, 217, 244, 252–253 ability of AI and SA to improve PM systems, 257 application of AI and SA in business processes, 255 automating PM Systems, 259–261 in business processes, 255–256 classification models to predict employee performance, 257–259 classification of AI, based on capabilities, 253–254 classification of AI, based on functionality, 254 competition, 219 demographics of customers, 219 drivers of digitisation and AI in retail, 218 in HR management, 259 limitations of AI and SA in PM systems, 261–262 for mapping cybersecurity controls for SME, 46–48 in PM systems, 257 retail customers, 218–219 retail digitisation using, 219–220 super, 254 technology and, 218 types, 253 Aspirational Districts Programme, The, 88 Asset management segment, 99 Augmented reality, 23 Authors’ network analysis, citation as per, 68–69 Autonomous robotics, 23 Balance sheet lending (BSL), 100 Bank 4.00, 102 Bank of Baroda, 7, 11–12 Bank of Hindustan, 2 Banking, 2, 98, 206 co-operative banks, 2 commercial banks, 2 industry, 205 payments banks, 2 small finance banks, 2 Banking, financial services, and insurance (BFSI), 29 Banking Regulation Act (1949), 2 Banks, 205 Bibexcel, 135 Bibliometrics, 57, 60 analysis, 141 of entrepreneurial universities, 57 R Package, 135 research, 141 Bibliometrix, 178 Biblioshiny, 178 Big data, 23, 85, 255 analytics, 84 BigTechs, 101 Billion Prices Project, 87 Black box model, 85 Black money, 58–59 Blending data sciences in economic and social issues, 86–87 Blockchain, 132 content analysis, 137–141 data analysis, 135–137 directions for future research, 141–142 implications, 141 methodology, 133–134 technology, 132 Bombay Stock Exchange (BSE), 75–76 Bootstrapping methods, 227 Bring your own device policy (BYOD policy), 40 Business domain-wise mission critical asset security (Business DMCAS), 43–44 Business to-Person lending models (B2P lending models), 101 Business-to-Business lending models (B2B lending models), 101 Businesses, 230 AI in, 255–256 changing priorities of CIA triad based on business domain, 30–31 SA in, 256–257 Buy Now Pay Later (BNPL), 101 C4.5 decision tree, 258 Canara Bank, 7, 9–10, 18 Capability maturity model (CMM), 26 Cashkumar (P2P lending platform), 107 version 2. 0, 108 Cashkumar Peer-to-Peer Lending Platform (Cashkumar P2P Lending Platform), 107–108 digital lending, 100–107 emotional analysis, 116–117 FinTech, 98–100, 108–109 literature review, 108 negative reviews, 119–120 P2P lending, 109–111 positive reviews, 118–119 research methodology, 112 sentiment analysis perspective, 111–112 theoretical background, 107 Castle approach, 28 Casual conversations, 250 Central Bank, 193 Central bank digital currency (CBDC), 190 Central Bank of Nigeria, 190 CIA triad assess priority of CIA triad for DMCA, 43 changing priorities of CIA triad based on business domain, 30–31 CIA trinity, 27 Citation network analysis, 67–68 citation as per authors’ network analysis, 68–69 Cloud computing, 23, 86 Co-authorship analysis, 60 Co-authorship network analysis as authors on money laundering, 62–66 as countries, 64–66 Co-occurrences analysis, 60 of keywords analysis on money laundering, 66–69 network analysis on money laundering, 66 Co-operative banks, 2, 4 Commercial banking, 2 Commercial banks, 2 foreign banks, 3 private sector banks, 3 public sector banks, 3 RRBs, 3 Communications service providers, 101 Companies Act, 105 Competitive pressure, 229 Conceptual model constructs and items measured, 221–223 development of, 221 Conceptual research model, 221 Confidence interval (CI), 227 Consumers, 216 Consumption of goods and services, 22 Content analysis, 137, 179 digitisation of agriculture, 140 supply chain management, 140 sustainable economic development, 140–141 Cooperative savings, 59 Cooperative Societies Act (1912), 4 Core cybersecurity concepts, 26–31 changing priorities of CIA triad based on business domain, 30–31 CIA Triad, 27 Defence in Depth, 28–29 DMCA, 29–30 Coronavirus, 162 Corporation threat agents, 24 Corruption, 56, 124 Cost-benefit analysis, 84 COVID 19, 5, 218 Africa, 165 effect of COVID-19 debt accumulation, 164 debt crisis, 164 debt statistics, 162–164 Europe, 164–165 global debt crisis, 161 heavily indebted countries, 167–168 and Indian Banking, 5 literature review, 161–162 methodology, 161 multilateral organisations, 166–167 pandemic, 160, 234–235 rich countries, 165–166 solution to overcome, 165 Cross industry standard process for data mining (CRISP-DM), 257 Crowdfunding, 99–100 Cryptocurrencies, 98 Customer relationship management (CRM), 253 Customers, 229 demographics of, 219 screening process, 58 Cutting-edge technology, 58 Cyber assets, 27 Cyber risk, 23 Cyberattacks faced by SMEs, experience of, 39–40 Cybercrime, 56 Cybercriminals, 37, 40 Cybersecurity, 23 calculate SME’s minimum overall cybersecurity controls implementation level, 44–45 implement prioritised cybersecurity controls for Business DMCAS, 43–44 responsible AI for mapping cybersecurity controls for SME, 46–48 Cybersecurity framework (CSF), 25 Cyberspace, 23 Data analysis, 224 measurement model, 224–226 structural model, 226–229 test, 224 tool, 88 Data collection, 223–224 Data extraction, 134 Data lags, 91–92 Data localisation problem, 92 Data mining, 85 techniques, 90 Data privacy and security, 91 Data science, 86 techniques, 85 Data-driven policy, India’s stance on, 87–89 Debt crisis, 161, 164 Debt restructuring, 162 Debt Service Suspension Initiative (DSSI), 166 Debt statistics, 162 external debt stocks, 162–163 massive spending by richer countries, 163–164 sovereign default, 164 Decision Tree, 257 Decision-making management, 173 Defence in depth (DiD), 28 Delay payments, 204 Democratisation of opinions, 236 Descriptive analysis, 60 Desktops, 40 Digital circuits, 22 Digital government, 87 Digital India campaigns, 89 Digital lending, 100 alternative finance models, 102 ecosystem, 100–102 functional business models in India, 105–107 funds transfer mechanism as per RBI guidelines, 105 global scenario, 101 governing enactments, 104–105 India, 102 landscape, 102–104 market share, 102 Digital sentiments, 236 Digital technologies, 109 Digital transformation, 216 in agriculture, 141 Digitalisation process of banking industry, 6 Digitisation intelligence competition, 219 demographics of customers, 219 drivers of digitisation and AI in retail, 218 retail customers, 218–219 technology and AI, 218 Digitisation of agriculture, 133, 140 Digitisation transforms retailing exchanges, 220 Directorate of Enforcement (ED), 126 Dirty money, 124 Document-term matrix (DTM), 178 Domain-wise Least Cybersecurity Implementation Framework (DLCI Framework), 41 assess priority of CIA triad for DMCA, 43 calculate SME’s DLCI Level, 45–46 calculate SME’s DMCAS Level, 44 calculate SME’s minimum overall cybersecurity controls implementation level, 44–45 identify DMCA, 41–43 implement prioritised cybersecurity controls for business DMCAS, 43–44 responsible AI for mapping cybersecurity controls for SME, 46–48 WCCI for SME, 44 Domain-wise Mission Critical Asset (DMCA), 29–30 Domestic lending by banks, 205 Drug trafficking, 56 e-CNY, 192 E-commerce platforms, 101 sites, 216 Earnings management, 146 conceptual framework, 147 income-targeting approach, 150–151 literature review, 148–150 priority theory of sustainable finance, 147–148 surplus income model, 152–155 surplus income model for sustainability, 151–152 Econometric models, 84 Economic and financial performance in topic modelling framework, relationship between money laundering and, 184–185 Economic growth (EG), 125, 128, 161, 173, 201 Electric vehicles infrastructure, investment target for, 202 Electronic word of mouth (e-WOM), 235 Embed quality assurance, 47 Emotion Lexicon (EmoLEX), 111 Emotional analysis, 116–117 Emotions, 116 Employees, 245, 258 in India, 175 narrow assessment of, 252 performance, 245 threat agents, 24 eNaira, 190, 193–195 CBDC, 190 money, 190 performs, 190 speed wallet, 196 Environmental, social and governance (ESG), 76, 79–81 ESG-based socially responsible investments, 75 Indian investors looking for, 75–76 Environmental accounting, 149 Environmental reporting, 146 Europe, effect of COVID-19 debt accumulation, 164–165 European Central Bank (ECB), 162 External debt stocks, 162–163 External incentives, 154 External stakeholders, 248 Facebook (technology company), 98 Federal Bank, 7, 13–14, 18 Finance models, 102 Financial Action Task Force (FATF), 58, 125 Financial crimes action plan for resolving financial crimes using SRI–ESG model, 81 channel for, 77–78 effects of, 79 terrorism financing devastating part of, 78–79 impact of unethical investments on, 79 Financial crisis (2008), 98 Financial industry, 205 Financial institutions, 205 in achieving sustainable economic goals, 206–207 through priority sector lending, 208–210 Financial markets, 101, 104 Financial performance Bank of Baroda, 11–12 Canara Bank, 9–10 co-operative banks, 4 COVID 19 and Indian Banking, 5 COVID 19, 5 data analysis, 8 data collection, 7 Federal Bank, 13–14 findings, 17–18 foreign banks, 3 HDFC Bank, 14–15 hypothesis testing for net profit, 16–17 hypothesis testing for NPA, 17 ICICI Bank, 12–13 Indian Bank, 10–11 limitation of study, 8 literature review, 5–7 non-performing assets, 4 non-scheduled banks, 4 payments banks, 4 private sector banks, 3 public sector banks, 3 research methodology, 7 research methodology, 8 research objectives, 7 RRB, 3 sample frame, 7 schedule banks, 4 small finance banks, 3–4 in topic modelling framework, relationship between money laundering and economic and, 184–185 Union Bank, 10 Yes Bank, 15–16 Financial services, 98 Financial study, 58 Financial Technology (FinTech), 98 branches of FinTech Industry, 99–100 classified into the following types, 98–99 credit, 102 landscape, 99 lenders, 101 start-ups, 109 Financing segment, 99 Firms, 147 Five-year planning process, 87 Forecasting methods, 84 Foreign Banks, 3 Formal process in PM systems, 249–250 Fugitive Economic Offenders Act (2018), 126 Functional business models in India, 105–107 Funds transfer mechanism as per RBI guidelines, 105 Global economy, 160 Global reporting initiative (GRI), 149 Globalisation of economies, 124 Gold medal, 238 Goods and Service Tax, 126 Google (Private companies), 91, 98 reviews, 114 Governance in India, 87 reporting, 146 Grameen Foundation, The, 87 Green accounting, 149 Green banking assessing funding needed by international agency, 205 investment target for electric vehicles infrastructure, 202 investment target for renewable energy generation, 201–202 investment target to set up smart cities, 203–204 methodology, 206 results, 206 role of financial institutions in achieving sustainable economic goals, 206–207 role of financial institutions through priority sector lending, 208–210 Green development, 210 Green energy, 210 Green growth, 206 Gross domestic product (GDP), 160, 174, 205 HDFC Bank, 7, 14–15, 18 Human bias, 252 Human resources (HR), 172, 255 AI in HR management, 259 Human-based PM systems, 252 Hume’s Aesthetic Theory, 108 Hypothesis testing for net profit, 16–17 for NPA, 17 ICICI Bank, 7, 12–13, 18 ID3 decision tree, 258 Illicit drug trafficking, 59 IMF Fact Sheet, 125 Income smoothing, 151 Income-targeting approach, 150–151 Incremental approach, 84 India current market trend of, 74–75 digital lending, 102 functional business models in, 105–107 measurements to control money laundering terror funding in, 125–126 retail scenario in, 217–218 SRI in, 75 stance on data-driven policy, 87–89 Indian Bank, 7, 10–11 Indian banking industry, 4 sector, 2 Indian Economy future implication of study, 128 impacts of money laundering on, 126–127 impacts of terror financing on, 127–128 measurements to control money laundering terror funding in India, 125–126 nexus of money laundering and terrorism financing, 125 Indian government, 90 Indian investors looking for ESG Investments, 75–76 Industry 1.0, 22 Industry 2.0, 22 Industry 4.0 digitisation, 23 Inferential research approach, 223 Informal economy, 174 Informal process in PM systems, 250 Information and communications technologies (ICTs), 23, 88, 217 assets, 27 Information security, 27 Information security management system (ISMS), 24 Information technology, 124 Institute for Energy Economics and Financial Analysis (IEEFA), 201 Insurance, 98 Intangible assets, 27 Integration of economies, 124 Interest-bearing eNaira, 194–195 Internal stakeholders, 248 International agency, assessing funding needed by, 205 International Energy Agency (IEA), 205 International Monetary Fund (IMF), 163, 175 International Standards Organization, 260 Internet of Things (IoT), 23, 84, 86, 255 Investment, 98 management, 175 target for electric vehicles infrastructure, 202 target for renewable energy generation, 201–202 target to set up smart cities, 203–204 IP Act (2000), 91 Keynesian model, 193 Know Your Customer (KYC), 106 Knowledge management cybersecurity, 40 Laptops, 40 Latent Dirichlet allocation (LDA), 179 Lender’s Club, 110 Lending policies, 205 Lending practices, 206 Link strength, 137 Logical controls, 35 Machine learning (ML), 86, 257 Malware assaults, 39 Management accounting, 148 Managerial discretion, 147 Managers and employees, 245–246 Market share, 102 Marketers, 218 Marketplace lending (MPL), 100 Massive data analysis approach, 59 Measurement model of data analysis, 224–226 Medal, 238 Mendeley database, 133 Mentor–Protege relationship, 250 Micro, small and medium enterprises (MSMEs), 208 Microsoft (Private companies), 91 Minerals, 30 Mission critical assets, 29 MIT Sloan School of Management, 87 Modern banking, 2 Money, 56 Money laundering, 60, 79, 124, 172–173 analysis of word cloud, 181 annual trend of publication, 61 citation network analysis, 67–69 co-authorship network analysis, 62 co-authorship network analysis as authors on, 62 co-authorship network analysis as countries, 64–66 co-occurrences network analysis on, 66–67 countries analysis, 62 data and methodology, 175–179 descriptive analysis, 179–180 historical background of, 58–60 impacts of money laundering on Indian economy, 126–127 investigating TF-IDF, 182–184 link between words, 181 literature review, 173–175 measurements to control money laundering terror funding in India, 125–126 nexus of, 125 relationship between money laundering and economic and financial performance in topic modelling framework, 184–185 research methodology and data, 60 results, 61 sources analysis, 61–62 Money lending, old concept of, 100 Mordor Intelligence, 89 Naïve Bayes classifiers, 258 Narcotic Drugs and Psychotropic Substances Act (NDPS), 59 NASSCOM, 89 National Association of Securities Dealer Automated Quotations, The, 98 National Strategy for Artificial Intelligence by NITI Aayog, 88 Natural catastrophes, 24, 34 Natural disasters, 34 Neo banks, 101 Net profit, hypothesis testing for, 16–17 Netnograhphy, 236 Nigeria CBDC, 190 current features of, 193–194 interest-bearing eNaira, 194–195 literature review, 191–193 no transaction costs, 195 redesigning, 194 security, 195–196 NIRAMAI, 88 NIST, 25 NITI Aayog, 88 Non-banking financial corporations (NBFCs), 100, 206 Non-performing Assets, 4 Non-performing loans (NPL), 162 Non-scheduled banks, 2, 4 Normalisation, 178 NPA, hypothesis testing for, 17 Offline P2P lending, 100 Olympic Games Tokyo (2020), 237 Olympics, 240 destination, 234 players, 239 Online P2P lending platforms, 100, 109–110 Online platforms, 40 Opaque system, 252 Open Government Data (OGD), 87 Opensource Stack software, 87 Oracle (Private companies), 91 Organisation-owned devices, 40 Organisational goals, 246 Organisations, 244 Organised retailers, 230 Organised retailing, 221, 223 Palantir Technologies (American software company), 87 Pandemic, 160 Parallel economy, 124 Partial least square (PLS), 224 Payment, 191 Payments Banks, 2, 4 Performance appraisal (PA), 244 Performance assessments, 249 Performance improvement, notifications of, 249–250 Performance management systems, 244–245 AI and SA, 252–257 AI and SA in PM systems, 257–262 components of, 245–246 formal processes, 249–250 informal processes, 250 inputs to PM systems, 250–251 issues in current PM systems, 251–252 monitoring, 246–247 outputs from PM systems, 251 planning, 246 principles of PM systems, 248–249 processes in PM systems, 249 reviewing, 247 rewarding, 247 stakeholders in PM systems, 247–248 tasks in PM Systems, 246 Person-to-Business lending models (P2B lending models), 101 Person-to-Person lending models (P2P lending models), 101, 109–111 crediting, 109 elements, 100 lending platforms, 100–101, 106 lending services, 104 Physical retailers, 216 Physical security current state of physical security controls in SME, 34 measures, 34 Physical stores, 217 Planning–programming–budgeting system, 84 Platform lending, 100 Policy-making process, 84 in India, 87 Predictive modelling techniques, 85 Prevention of Money Laundering Act (PMLA), 59, 126 Priority sector lending role of financial institutions through, 208–210 Priority theory of sustainable finance, 147–148 PRISMA 2020 Flow Diagram, 133 Private Banks, 8, 18 Private companies, 91 Private giants, 89 Private Sector Banks, 3 Production-linked Incentive Scheme (PLI Scheme), 207 Profitability, 5 of Indian banks, 7 Programmable integrated circuits (PLCs), 22 Public policies, 84 Public Sector Banks, 3, 8, 18 Python application, 112, 114 Qualitative research techniques, 85 Quality assessment, 134 Quasi-legal enterprises, 56 Real-time resource monitoring techniques, 85 Refugee Olympic, 237 Regional Rural Banks (RRB), 2–3 Relative frequency, 183 Renewable energy, 22, 201, 207 investment target for renewable energy generation, 201–202 Research methodology, 85 Reserve Bank of India (RBI), 2, 6, 99, 207 funds transfer mechanism as per RBI guidelines, 105 Reserve Bank of India Act (1934), 2, 4 Resource allocation, 76 Retail business analytics, 219 Retail customers, 218–219 Retail digital promotion, 220–221 Retail industry, 221 Retail scenario in India, 217–218 Retail stores, 216 Retailers, 216–217, 229 Retailing, 220 data analysis, 224–229 data collection, 223–224 development of conceptual model, 221–223 drivers of digitisation and AI in retail, 218–219 implications of study, 229–230 limitation, scope for further research, 230 literature review and hypothesis development, 217 research methodology, 223–223 research objectives, 217 retail digital promotion, 220–221 retail digitisation using AI, 219–220 retail scenario in India, 217–218 Reward system, 247 Rio Olympic (2016), 236 Scalability, 252 Schedule Banks, 4 Scheduled banks, 2 Search strategy, 133 Security awareness training for employees in SMEs, frequency of, 37–38 Security controls in SME, current state of, 34 Security objectives, 27, 29 Selection criterion, 133–134 Sentiment analysis, 238 method, 114 perspective, 111–112 Sentiments, 236 Sin stocks, 80 Small and Medium Enterprises (SME), 22, 31 age of, 32 analysis of research interview results, 41 analysis of research survey results, 32 biggest problems faced by SMEs implementing or deciding/planning to implement cybersecurity controls, 38–39 core cybersecurity concepts, 26–31 current state of administrative security controls in, 35–37 current state of implemented standards or framework in, 32–33 current state of physical security controls in, 34–35 current state of security controls in, 34 current state of technical security controls in, 35 DLCI framework, 41–48 DLCI Level, 45–46 DMCAS Level, 44 experience of cyberattacks faced by, 39–40 frequency of security awareness training for employees in, 37–38 literature review, 24–26 methodology, 31–32 minimum overall cybersecurity controls implementation level, calculate, 44–45 responsible AI for mapping cybersecurity controls for, 46–48 WCCI for, 44 Small and medium-sized businesses (SMBs), 23, 101 Small business owners, 109 Small finance banks, 2–4 Smart Analytics, 252, 254–255 ability of AI and SA to improve PM systems, 257 AI in HR management, 259 application of AI and SA in business processes, 255 automating PM Systems, 259–261 benefits of, 255 classification models to predict employee performance, 257–259 limitations of AI and SA in PM systems, 261–262 in PM systems, 257 SA in business processes, 256–257 Smart cities, investment target to set up, 203–204 Social accounting, 148 Social media, 219, 235 Social reporting, 146 Socially responsible investments (SRI), 74–76, 79–81 action plan for resolving financial crimes using SRI–ESG Model, 81 current market trend of SRI in India, 74–75 effects of financial crimes, 79 ESG and SRI, 79–81 findings of study, 77 heterogeneity, 76 in India, 75 investors, limitations of study, 77 research 77 research methodology, 77 review of socially responsible 75–76 76 terrorism financing devastating part of financial 78–79 impact of unethical investments on financial crimes, 79 unethical investors, 77–78 41 energy generation, 201 234 234 239 239 149 in PM Systems, 247–248 107 Bank of India 2 Data Analysis, 224 theory 235 modelling 224 model of data analysis, 226–229 178 chain management, 140 income model, implication of model, implications for or for sustainability, 151–152 profit, 206 149 Sustainable development, 206 Sustainable development Sustainable economic development, 140–141 Sustainable economic goals, role of financial institutions in 206–207 Sustainable 147 Sustainable growth in India, 206 security 26 18 249 (Private 89 98 controls, 35 security controls in SME, current state of, 35 132 and AI, 221 companies, 98 Technology and and model Technology governance data sciences in economic and social issues, 86–87 India’s stance on data-driven policy, 87–89 research and methodology, findings and 22 frequency 179 investigating TF-IDF, 182–184 financing on Indian economy, impacts of, 127–128 59 financing, 79 devastating part of financial 78–79 nexus of, 125 threat agents, 24 analysis, 178 data methods, 178 agents, 24 Tokyo Olympic (2020), 234 data analysis and findings, literature review, research methodology, 236 Tokyo Olympic 234 179 relationship between money laundering and economic and financial performance in, 184–185 profit, action 236 PM systems, 252 149 253 234 content analysis, 236 data, 236 sentiments, 235 laundering system, 59 investments on financial crimes, impact of, 79 investors, 77–78 payments 6 Union Bank, 7, 10 56 National Security 28 224 analysis, 60 60, 135 23 87 40 of 173 Cybersecurity Implementation 44 22 23 Yes Bank, 7, 18 25 COVID 19 and Financial Performance of Banks in and of Least Cybersecurity for Small and Medium Enterprises for Global Digitalised Economy Money of from to Socially for Financial Technology and of Governance and Policy-making for the the Sentiment Analysis of Cashkumar Peer-to-Peer Lending on Google of Money Laundering and Financing on the Indian Economy the on Implementation of in Earnings Management for Income of Sustainable COVID-19 Global Debt to the Analysis of Money Laundering Research the Central Bank Digital for Payments and Green Banking to Sustainable Economic Digitisation and Artificial Intelligence in Sector on Sentiment Analysis in 2020 Smart and AI for Modern Performance Management

Tighter regulatory demands and higher customer expectations regarding the protection of information force enterprises to systematically ensure confidentiality, integrity and availability of stored information and processing facilities. Information Security Management Systems (ISMSs) are used to address these challenges. Recent studies show that the majority of companies plans to establish at least basic information security management to prepare for future developments. Larger enterprises have already embraced ISMSs, whereas small and medium-sized enterprises (SMEs) are catching up and require support in defining, introducing and operating them. We developed ADAMANT, an SME-friendly tool that supports continuous information security management incorporating stakeholders of different domains. In this paper, we evaluated our approach to introduce an ISMS in SMEs using an introductory information security training. The evaluation shows that our tool improves critical information security management tasks. Furthermore, integrating ADAMANT in customized security trainings allows companies to directly use training results to implement an ISMS.

This paper examines using a requirements management tool as a common thread to managing the complexity of information security systems. Requirements management provides a mechanism to trace requirements through to design, implementation, operating, monitoring, reviewing, testing, and reporting by creating links to associated, critical artefacts. This is instrumental in managing complex and dynamic systems where change can impact other subsystems and associated documentation. It helps to identify the affected artefacts through many layers. Benefits to this approach would include better project planning and management, improved risk management, superior change management, ease of reuse, enhanced quality control and more effective acceptance testing. It would also improve the ability to audit, especially at a time when outsourcing of security functions is occurring throughout the world. ISO 27001:2006 provides a model for the implementation of an Information Security Management System (ISMS) that can be tailored by an organization. It is proposed that employment of a requirements management tool could manage the traceability aspects of an ISMS.

ObjectiveIn its aim to develop a model of an occupational safety and health management system (OSHMS) for MSMEs in Indonesia, this study seeks to explore crucial factors in relation to the implementation of such a system in MSMEs by conducting a review of previous studies on the topic. MethodsThis systematic review is an exploratory study from several online databases our using a combination of two keywords that refer to the population and exposure variables in the PROSPERO Approach by using the “AND” strategy. Each literature goes through selection based on PRISMA flow chart. A Critical Appraisal Skill Programme (CASP) checklist for risk of bias assessment was used for the evidence quality appraisal. ResultFrom 37 papers, books, online books and local articles were selected, we identified pivotal factors in the implementation of OHSMS in MSMEs which can be classified into downstream factors (OSH training, commitment, risk management, and communication), middle stream factors (support from the third party), and upstream factors (the role of government). ConclusionVarious pivotal factors in promoting OSH implementation at MSMEs can be seen as role of MSMEs actors (employer and employee); third party and government.

The article justifies the imperatives of applying the situational approach to information security management (ISM). We modified the model of the Information Security Management System (ISMS), which is the basis of ISO/IEC 27005: 2011: we added the “Decision Making” stage after the “Determining the main criteria” step. The solution is to choose an approach to proccesing information security risks — their assessment, impact and taking — based on certain criteria. Using the developed algorithm, we implemented a cognitive software module of the information system management (ISM) in an educational institution. The use of the cognitive software module has significantly reduced the labor costs of specialists in the Information Security (IS) Department, including automation of the reporting procedures. The application of the situational approach allowed us to integrate a person into the automated system to ensure the cybersecurity of the educational sector.

To date, the issue of security of information system resources in the presence of threats in the global information sphere is one of the most urgent both in Russia and in the world. This is due to stricter requirements for companies that store and process personal data. Recently, more and more companies of large and medium-sized businesses regularly face the resolution of incidents related to data loss as a result of cyber attacks or violation of established information security regulations by the company's personnel. In this regard, priority attention to information security has become a necessity for running a successful business. An information security management system — ISMS) is a part of an organization's overall management system based on a risk-based approach to managing information security. SMIB allows not only to minimize the risks associated with information security, but also can give a serious competitive advantage in the global market.

The growth of computers and of information technology has been explosive. As a result, information technology has been widely applied in every aspect of our life—from business, government, education, finance, health-care, aerospace to national defence. Computers, especially networked computers, have brought benefits to us and improved our lives. However, surveys and reports from various industry associations and security organizations suggested that only a few organizations can successfully protect their information assets. Organizations realize that information security is a complex issue, involving both human and technical factors. This paper is an attempt to empirically assess the maturity of Information Security Management System (ISMS) implementation in selected IT Service organizations in terms of confidence of their employees on their Information Security Management System.

Information Security Management System (ISMS) implementation in Institution is an effort to minimize information security risks and threats such as information leakage, application damage, data loss and declining IT network performance. The several incidents related to information security have occurred in the implementation of the Academic System application in Indonesian higher education. This research was conducted to determine the maturity level of information security practices in Academic Information Systems at universities in Indonesia. The number of universities used as research samples were 35 institutions. Compliance with the application of ISO 27001:2013 standard is used as a reference to determine the maturity level of information system security practices. Meanwhile, to measure and calculate the level of maturity using the SSE-CMM model. In this research, the Information System Security Index obtained from the analysis results can be used as a tool to measure the maturity of information security that has been applied. There are six key areas examined in this study, namely the role and importance of ICT, information security governance, information security risk management, information security management framework, information asset management, and information security technology. The results showed the level of information security maturity at 35 universities was at level 2 Managed Process and level 3 Established Process. The composition is that 40% of universities are at level 3, and 60% are out of level 3. The value of the gap between the value of the current maturity level and the expected level of maturity is varied for each clause (domain). The smallest gap (1 level) is in clause A5: Information Security Policy, clause A9: Access Control, and clause A11: Physical and environmental security. The biggest gap (4 levels) is in clause A14: System acquisition, development and maintenance and clause A18: compliance.  Â

The issue of creating an information security system is very relevant in the world today. One of the urgent tasks is to solve the issues of effective protection of information from both external and internal threats through the creation and implementation of information security management systems in automated systems of enterprises, which, among other things, requires the formalization of the task of protecting information for its subsequent implementation by software and other means. Now there are security analysis systems, for example, that examine the security elements settings of workstations and servers operating systems, analyze the network topology, look for unprotected network connections, examine the settings of firewalls. The disadvantage of these systems is that they are not suitable for monitoring large volumes of network traffic. The solution to this problem is the use of monitoring tools capable of analyzing large amounts of data in real time. Therefore, a significant place in the article is given to the review of developments based on artificial intelligence technologies, namely multi-agent systems, review of information security models, threat risk assessment in automated systems. The functional architecture of the information security management system based on a multi-agent system has been proposed to search in real time for information security optimal solutions through the selection of such coalitions of protection mechanisms agents that will allow to build the optimal protection of the automated system according to the selected criteria. The model with complete overlapping of threats has been substantiated and adopted as a basis, which allows to analyze the overall situation and choose strategically important decisions directly during the organization of information security. The essence of of multi-agent systems functioning that implement a decentralized control system based on the work of autonomous agents that can be implemented programmatically has been revealed. The role of threat agents, resource agents, agents of protection mechanisms and their functional purpose have been defined. The problem of searching a set of protection mechanisms agents coalition for the current state of the automated system as a problem of optimal search by the criterion of protection cost, taking into account the value of information, has been generalized. Due to the modularity of the multi-agent system, the further work will be aimed at detailing its components and perfection.

MSME: Nursery for Entrepreneurshipp: A Legal Perspective

In every economy of the world, the impact of the SME is not taken for granted as for all healthy economy, there must be a healthy SME due to the fact that, their contribution to the production volumes in terms of exports, innovations and the entrepreneur skills is vital for every economy to grow. There is a reasonable level of agreement among policy makers, theorists, economists, and business experts that small and medium enterprises (SMEs) are drivers of economic growth. SMEs’ access to credit has been a serious subject of debates to policy makers and researchers of both developed and developing economies based on the pivotal and significant role of SMEs’ in growing the private sector as well as the global economies as an extension to the nations. Hence, there is a need to examine the bank lending capacities to the SMEs’ in Nigeria and its effects on the Nigerian business environment, the impact of financial crisis in Nigeria on SMEs’ access to bank credit, in addition, to determine the impact of SMEs’ on the Nigerian economy. The study employed the use of secondary source of data in the relevant literatures and data generated from the Central Bank of Nigeria Bulletin, 2016 on Credit Accessibility to the SME sector in Nigeria from the year 1992-2015. An econometric analysis was used specifically regression analysis. The result confirmed that Bank lending capacity as one of the factors of financial crisis does affect the SMEs access to credit, and there is a strong and positive relationship between the SMEAC, Foreign Direct Investment, Interest Rate and Inflation while there is a strong and negative relationship between the SMEAC, GDP Total, CBTC and the Money Supplied. However, there is a weak relationship between the SMEAC and the SMEGDP and CBLSME. The result indicates that, as the Interest Rate and Inflation continue to increase it has a negative influence on the SMEs access to credit through the commercial banks. It is recommended to the Nigerian government that, economic policies that would favour the establishment of more SMEs with access to flexible credit facilities be made. In addition, the government needs to improve on the commercial bank lending capacities to the SMEs as this when positively managed will positively influence the contribution of the SMEs GDP Keywords : Financial Crisis, credit Accessibility, small and medium enterprises DOI : 10.7176/RJFA/10-1-05