RISK ANALYSIS OF DIGITAL LOAN COMPARISON PLATFORM

Digitalization forces manufacturing companies to shift towards customer-oriented, highly data-driven forms of value creation. This results in a changing IT security risk landscape as data becomes an attractive target for adversaries leading to an increasing number of attacks. In order to successfully protect data, it is essential that it is assessed in an integrated manner. Although IT security and data-based value creation have been studied by large research bodies, the existing literature fails to provide guidance on IT security risk analysis in data-based value chains. To contribute to the closure of this research gap, we propose a modeling approach which allocates different data types to value activities and analyses the data types in relation to the properties of relevant IT security risks. The evaluation, conducted with industry experts, reveals that it is not only a company’s primary assets that are of concern but also less important data types subject to significant levels of exposure that bear considerable IT security risks.

This chapter presents an example outlining the process and results of a software security risk analysis. Unlike other types of security risk analyses, a software security analysis focuses on the design and implementation of the online application rather than the network and physical environment in which the application is deployed. An example is used to illustrate the benefits of a software security risk analysis and demonstrate how software security extends and complements conventional security and business risk analyses.

The present study integrates external and internal factors for measuring the performance of the organisation through the adoption of cloud computing activities. External factors consisted of perceived IT security risk, risk analysis, and social influence; whereas, trust, technology innovation, and industry usage were considered as internal factors. A statistical approach, namely structural equation modelling, was employed for the analysis of the data obtained through a questionnaire survey. The findings showed that external factors hurt cloud computing adoption (CCA), whereas internal factors and perceived ease of use have a positive impact on CCA. This investigation is intended to guide the policy and decision makers in formulating the efficient strategies/policies for the effective implementation of CCA.

It has been reported in the literature that about twenty new software vulnerabilities are reported weekly. This situation has increased the security awareness in the software community. Nowadays, software services are expected not only to satisfy functional requirements but also to resist malicious attacks. As demand for more trustworthy systems is increasing, the software industry is adjusting itself to security standards and practices by increasing security assessment and testing effort. Even though there is a consensus that better software engineering is to improve software quality in the early stage of software development, so far, various approaches that have been proposed to analyze and quantitatively measure the software security target, primarily show the finished software products in their operational life. There are few achievements on how to reduce or effectively mitigate the security risks faced by software products during the development process. In this chapter, the authors introduce a novel model-driven perspective on secure software engineering, which integrates seamlessly software security analysis with traditional software development activities. A systematic security engineering process that starts in the early stages of the software development process and spans the entire software lifecycle is presented. Fundamental software security concepts and analysis techniques are also introduced, and several illustrative examples are presented, with focus on security requirements and risk analysis.

Hospitals are indispensable institutions for public healthcare and part of society’s critical infrastructures. The increasing use of information technology and networks creates new dependencies and risks that could affect medical service availability. A systematic analysis of risks associated with IT will help to determine the risks for critical processes caused by IT disruptions or failures.

Electronic health records are becoming increasingly common in the health care industry. Although information technology (IT) poses many benefits to improving health care and ease of access to information, there are also security and privacy risks. Educating health care providers is necessary to ensure proper use of health information systems and IT and reduce undesirable outcomes. This study evaluated employees' awareness and perceptions of the effectiveness of two IT educational training modules within a large publicly funded health care system in Canada. Semi-structured interviews and focus groups included a variety of professional roles within the organisation. Participants also completed a brief demographic data sheet. With the consent of participants, all interviews and focus groups were audio recorded. Thematic analysis and descriptive statistics were used to evaluate the effectiveness of the IT security training modules. Five main themes emerged: (i) awareness of the IT training modules, (ii) the content of modules, (iii) staff perceptions about differences between IT security and privacy issues, (iv) common breaches of IT security and privacy, and (v) challenges and barriers to completing the training program. Overall, nonclinical staff were more likely to be aware of the training modules than were clinical staff. We found e-learning was a feasible way to educate a large number of employees. However, health care providers required a module on IT security and privacy that was relatable and applicable to their specific roles. Strategies to improve staff education and mitigate against IT security and privacy risks are discussed. Future research should focus on integrating health IT competencies into the educational programs for health care professionals.

Cyber security of robots: A comprehensive survey

The rapid advancement of information technology has made humans increasingly dependent on computer systems in various aspects of daily life. However, this situation is also accompanied by an increased risk of security threats, such as digital attacks that can disrupt system operations and cause data breaches. Computer security becomes a crucial element to maintain the confidentiality, integrity, and accessibility of information. This study aims to examine the concept of computer security, various types of common threats, and protection strategies that can be implemented to protect data from cyber threats. The research approach applied is a literature review through examination of academic journals, books, and articles related to computer security. The research findings reveal that the implementation of security mechanisms such as antivirus software, firewalls, data encryption, and increasing user awareness can reduce the risk of cyber attacks. The conclusion of this study is that computer security needs to be implemented comprehensively, both from technical and non-technical sides, so that the system is maximally protected.

This article provides the modern cybersecurity trends directly related to aim ant tasks of criminals. It reflect the assessment of global technological risks discussed at 2020 World Economic Forum. The article covers estimations on increase on negative impact of geopolitical sharpness elements on economic potential of next generation technologies. Data fraud and cyberattacks are considered as priority key indicators at assessment of the most possible global risks, and attacks at informational infrastructure are equal to the cyberattacks risks at the rating of the most possible risks. Forecast indicates that cyberattacks are the most likely to be used as indirect conflicts between countries which look forward to expand their range on influence. In such situation the cybersecurity issues can`t stay on the second place or be the issues which should be solved at existence of direct cyber threats to the modern informational systems, IoT systems and SCADA. Obviously, we should revise the approaches to creation and development of modern informational technologies and cybersecurity issues should be considered as constituent element in development of modern informational systems from the very moment of its initiation, projecting, and on all stages of production and support. Reorientation of informational system developers to creation of new integrated platforms with cybersecurity constituent elements demands the research and implementation of new approaches to its development, as well as engagement of the world community at elaboration of relevant standards and protocols, which ensure the secure functioning of informational systems at world net. The article provides the basic requirements to constituent elements at development of concept of informational and cyber security in conditions of hybrid threats especially provides recommendations on organizational structure for informational security department and general principles to organize the activities and controls on informational and cyber protection. The article defines tasks for informational security department, provides the list of basic actions to secure information, and formulates the tasks, which should be ensured by technical infrastructure, organizational, procedural and hardware and technical actions to manage the informational security, and other principles to ensure informational security in development of concept of informational security within the hybrid threats conditions.

Cybersecurity decision support model to designing information technology security system based on risk analysis and cybersecurity framework

The paper describes the on-going development of a new computer-based security risk analysis methodology that may be used to determine the computer security requirements of medical computer systems. The methodology has been developed for use within healthcare, with particular emphasis placed upon protecting medical information systems. The paper goes on to describe some of the problems with existing automated risk analysis systems, and how the ODESSA system may overcome the majority of these problems. Examples of security scenarios are also presented.

Network security risk assessment of football matches based on data mining technology

With the emergence of new technologies, the potential of cyberspace is immense; however, the growing number of cyber-attacks on states’ critical infrastructure has highlighted the need for cyber security. Although it is challenging to achieve foolproof security, states can maximise safety in the cyber domain through cyber partnerships with technologically advanced countries. This study finds that India is maximising its cyber security while enhancing its offensive cyber capabilities by concluding agreements with most cyber-secure states. Furthermore, India’s cyber capabilities are more focused on Pakistan due to longstanding tensions between the two countries. On the other hand, Pakistan lacks focus on cyber security and has yet to take sufficient measures. Pakistan can maximise its cyber security through technological advancements and taking advantage of friendly countries' expertise in the cyber security domain. Cyber security partnerships will strengthen Pakistan against threats emerging from state and non-state actors. Following a qualitative exploratory research design, this study provides a detailed understanding of India’s growing cyber security partnership and cyber posture, besides highlighting Pakistan’s approach towards cyber security. Bibliography Entry Farooq, Ammad and Ahmad Ali. 2022. "India’s Growing Cyber Partnerships and Challenges for Pakistan." Margalla Papers 26 (2): 49-61.

Chapter 1 - Domain 1: Information Security Governance and Risk Management

Part 1: security policy and organizational structure personnel and responsibilities access control and cryptographic controls information flow control security of stored data monitoring and audit trails military and commercial security. Part 2: risk analysis and management conventional computer security risk analysis and management Courtney Technique of risk analysis Cramm risk analysis. Part 3: physical security access control personal computer security contingency planning insurance. Part 4: network security security on IBM systems OSI security. Part 5: identify and authentication of the user PINS privacy, integrity and authentication of financial messages financial network security. Part 6: communications and logical security physical security of office systems procedural and personnel security. Part 7: data protection legal protection of information assets computer crime law and personnel.