Necessary but Not Sufficient

Purpose: The rapid advancement of digital technologies has necessitated robust security measures to protect information systems against escalating cyber threats. The objective is to study the effectiveness of the command line interface (CLI) in IT system security management. Design/methodology/approach: This paper explores the efficacy of the command line interface (CLI) in managing IT system security and examines the potential of integrating biometric data into cryptographic mechanisms. We delve into the CLI's precision and flexibility, which enable the execution of complex security tasks and its seamless integration with advanced security tools. Furthermore, we investigate the incorporation of biometrics, such as fingerprints and facial recognition, into encryption processes, offering enhanced security by binding access to individual biometric identifiers. Findings: Our findings suggest that while CLI remains a vital tool for security specialists, the convergence of CLI with biometric authentication can significantly fortify the security of information systems. Practical implications: The paper addresses the challenges and opportunities presented by this integration, including privacy concerns and the need for secure handling of biometric data. We also discuss the implications of such technologies in the context of the European Union's legal framework on cybersecurity. Originality/value: The article is aimed at those involved in cyber security management. The article presents the possibility of using biometric attestations to support the security of IT systems. Keywords: cybersecurity, European Union cybersecurity legislation, cryptographic mechanisms, data encryption, multi-factor authentication. Category of the paper: research paper.

Data and IT systems security is a critical aspect and plays a significant role in protecting an organization’s business. Organizations must safeguard their information and assets to sustain their value and reputation. Security is essential to information systems because it concerns personal and confidential data belonging to users or companies. The study aims to indicate how enterprises in Poland guarantee the security of data and IT systems, as well as to estimate the complexity of this phenomenon. We have confirmed that small and medium enterprises (SMEs) organizations with a lower level of computerization generally invest fewer resources and possess less expertise in establishing and maintaining IT security policies and strategies.

The purpose of this paper is to study on the development of IT sys- tem emergency recovery focused on IT system security. There are some devel- opment efforts in terms of trial about prompt recovery solutions from securities incidents. In this paper, the main objective is to study about IT system emer- gency recovery solution during system down and security incident happening to react rapidly and correctly for normal condition recovery. This study is fo- cused on quick time back up confronting about security incidents from hacking attacks which cause system down, with a view to prompt recovery of IT system to normal operation conditions.

While many organizations offer certifications associated with information technology (IT) security, there is no single overarching accrediting organization that has identified the body of knowledge and experience necessary for success in the IT security field. In order for an IT security workforce to be acknowledged and recognized throughout the world as possessing a proven level of education, knowledge, and experience in IT security, a formal process for certifying IT security professionals must be developed. This research effort suggests that the IT security community use the Project Management Institute’s process for certifying Project Management Professionals (PMPs) as a model for developing an open and easily accessible IT Security Body Of Knowledge (ITSBOK) and an associated international certification process for IT security professionals.

As the Information Technology developing, kinds of the IT applications have entered various government sectors. The E-Gov. has been an important method to improve government's transparency and social services ability. Meanwhile, the varieties of cyber-attacks which against the IT system cause mass unrecoverable damages. Therefore IT system's security should be considered systematically. The system has to be protected integrally. Classified Protection for Cyber Security has been hanged out by the National Security Departments.

This article presents the concept of improving the security of information systems intended for storing knowledge in organizations. It is designed to protect knowledge from leakage, theft or destruction, but without denying access to its resources to employees. It is possible thanks to the introduction of the so-called security and sharing groups (S&S groups) that have two attributes at the same time – the level of knowledge security and the level of knowledge sharing. The proposed concept also assumes assigning knowledge categories to data and enabling the organization to manage the allocation of operations on data from individual knowledge categories to S&S groups. As a result, the system enables the protection of the most valuable knowledge resources, without restricting access to its other categories. The developed concept makes it easier to find a compromise between the strength of security and the free flow of knowledge at the time of system implementation. In addition, the dynamic ability to choose the level of security and the level of access to knowledge in the system allows adaptation to changes taking place in the environment of the organization and increases its resilience.

Information assets are an essential commodity that Cybersecurity systems must secure. Due to the velocity, variety, and volumes of data, IT professionals are seeking cyber analytic capabilities to detect Advanced Persistent Threats (APT) in real-time. IT security systems are dispersed throughout the enterprise, making this a daunting and time-consuming task. Consolidation of this security data requires an appropriate, centralized infrastructure ecosystem. IT security architects and engineers are struggling to identify the proper infrastructure components, network bandwidth, and architectures required to host cyber analytics capabilities. This study explores distributed architectures and infrastructure elements that swiftly ingest (via streaming), store, query, and tag large data sets required for big data cybersecurity analytics. It provides an overview of the functional requirements and their corresponding performance characteristics needed to operate a robust the cyber analytics ecosystem infrastructure component (CAEIC). Finally, this study recommended the use of edge computing within the Cyber Analytics Infrastructure Platform to establish a cyber baseline at the edge of the network.

Chapter 9 - Corporate IT Security Project Plan

Introduction. Digital transformation, which is characterized by the rapid pace of changes in the marketing environment, aggressive actions of competitors, high heterogeneity of consumer requests and preferences, has a significant impact on the business, namely, it requires the generation and implementation of new approaches to solving business problems, as well as achieving the set goals. In order to effectively conduct and develop an online business, it is necessary to follow new tendencies and trends in meeting the constantly growing requests, needs and preferences of online buyers, simultaneously levelling or eliminating risks that may arise in the short and long term with the greatest probability, as well as have negative effects for business. Purposes of our research are to develop the taxonomy marketing and management risks of online business by using multidimensional systematization and decomposition methods; to substantiate the scientific and methodical approach to verification and qualitative assessment of probability of the marketing and management risks for online business; to formulate recommendations regarding the formation of an intelligent IT security system for levelling and / or eliminating the risks of online business in the context of the implementation of the relevant risk management plan; to develop and test applied tools for effective risk management of online business. Methods. The symbiosis of general and specific methods is used to achieve the purposes, including: methods of dialectical cognition, generalization and systematization, abstraction, synthesis; statistical, dynamic and cluster analysis; formalization method; expert survey; calculation-analytical and comparative methods; matrix method. Results. The marketing management risks of online business in the digital transformation context are explicated and concretized. The taxonomy of marketing-management risks of online business is developed and represented like a multi-dimensional risks systematization as a result of their decomposition. The scientific and methodical approach to verification and qualitative assessment of the probability of the marketing and management online business risks is substantiated. The algorithm for the identification of the online business risks status is proposed. It reflects the consecutive stages of the qualitative risks groups assessment and determines the choice of a method for its levelling and / or elimination. The framework of the risk management plan for online business is developed. This framework takes into account triggers and consequences of risks onset. The matrix for monitoring the implementation of the risk management plan for online business is compiled. The phases of the intelligent IT security system development are substantiated. Conclusions. The proposed scientific and methodical approach and the developed applied tools are tested by the example of Ukrainian retailers’ online businesses. The testing results reflect the significance of the authors’ developments and proposals, as well as the expediency of their implementation for the successful set up and development of online business in the digital transformation context.

Technology has become a ubiquitous element in healthcare systems, generating vast amounts of data from patients and healthcare providers. Consequently, healthcare information safety and privacy constitute serious concerns nowadays. This chapter presents a general overview of privacy and cybersecurity challenges via a meta-research of literature review. It discusses the development of technology informatics in healthcare, the ways health data is generated, stored, managed, and analyzed for decision making and effective patient outcomes. Concepts such as privacy, confidentiality, and security are analyzed in conjunction with two legal frameworks that regulate health information: the General Data Privacy Regulation (GDPR) in the European Union and the Health Insurance Portability and Accountability Act (HIPAA) in the United States. Moreover, challenges, threats, and upcoming trends concerning healthcare informatics are evaluated, best practices and solutions are formulated. This chapter aims to increase cybersecurity awareness for patients, healthcare staff, and organizations and presents countermeasures for future research. It also focuses on several methods to protect healthcare information, including information security risk management, data encryption, and data protection laws/regulations. COVID-19 pandemic highlighted the crucial need to enhance IT systems security. As a result, this chapter offers students, scholars, and scientists a comprehensive background concerning healthcare informatics on two relevant topics: privacy and security.

The constant failure in cyber security in power systems and substation automation that has crippled business activities that mostly depend on power to run their routine activities are caused by Lack of Adequate Security Measures, Human Error, Outdated Software and Hardware, Insufficient Training and Awareness, Insider Threats, Weak Access Control Mechanisms, Inadequate Network Segmentation, Failure to Patch Vulnerabilities, Complexity of the System, Third-Party Vendor Risks and Denial of Service (DoS) Vulnerabilities. This is surmounted by introducing improved cyber security in power systems and substation automation using intelligent based system. To achieve this, it is done in this procedure characterizing and establishing the causes of failure in cyber security in power systems and substation automation, designing a SIMULINK model for cyber security in power systems and substation automation, designing a rule base that will reduce the causes of failure in cyber security in power systems and substation automation,training ANN in the rule base for effective reduction of causes of failure in cyber security in power systems and substation automation, developing an algorithm for the process, designing a SIMULINK model for improving cyber security in power systems and substation automation using intelligent based system and validating and justifying the percentage of improvement in the reduction of causes of failure in cyber security in power systems and substation automation. The results obtained were the conventional Lack of Adequate Security Measures that cause failure in improving cyber security in power systems and substation automation was 25%. On the other hand, when an intelligent based system was incorporated into the system, it drastically reduce the cause failure in improving cyber security in power systems and substation automation to 21.53%, the conventional outdated software and hardware that cause failure in improving cyber security in power systems and substation automation was 15%. Meanwhile, when an intelligent based system was inculcated in the system, it became reduced to 12.92% thereby enhancing the performance of cyber security in power systems and substation automation by 2.08%, the conventional Weak Access Control Mechanisms that cause failure in improving cyber security in power systems and substation automation was 8%. However, when an intelligent based system was integrated in the system, it was reduced to 6.9% and the conventional Denial of Service (DoS) Vulnerabilities that cause failure in improving cyber security in power systems and substation automation was 2% while when an intelligent based system was incorporated in the system, it automatically reduced to 1.7%. Finally, with these results obtained, It vehemently shows that the percentage improvement in cyber security in power systems and substation automation was 0.3%.

The increasingly close connection between medical devices and computer networks has given rise to novel cybersecurity threats. Due to the elevated number of connected medical devices, this means that more opportunities for security vulnerabilities exist. To safeguard against cybersecurity breaches in medical devices, understanding the complex nature of the operational surroundings is essential, and knowing about each technical susceptibility is valuable. The purpose of this paper is to discuss a network model of medical devices. Security vulnerabilities in the devices, as well as potential methods of attack, were examined. A solution is provided to improve the security of IT systems, due to essential role medical devices play in patient outcomes.

Editorial

ITL achieved major impact in the areas of measurement and standards for a number of its programs. Measurement technology for the Next Generation Internet (NGI) and the introduction of secure protocols for the Internet are creating a seamless, secure environment for millions of Internet users worldwide. In cooperation with NSA through the NIAP, we are ensuring the security of IT systems and networks through cost-effective testing, evaluation, and certification programs. Also noteworthy is our leadership in defining requirements for embedded Java, as well as numerical extensions to this language.

The purpose of this article is to present selected threats that may affect the security of IT systems caused by cyberattacks coming from cyberspace, as well as to prescribe the results that could be caused by the failure to implement security measures to protect information system (IS).