On security preparations against possible is threats across industries

Tunghai University Institutional Repository > 管理學院 > 企業管理學系所 > 期刊論文 > Item 310901/23404

Please use this identifier to cite or link to this item: http://140.128.103.80:8080/handle/310901/23404

Title:	On security preparations against possible is threats across industries
Authors:	Chang A.J.-T., Yeh Q.-J.
Contributors:	Department of Information Management, Chin Min Institute of Technology, Miaoli, Taiwan;Department of Business Administration, National Cheng Kung University, Tainan, Taiwan
Keywords:	Developing countries;Information management;Management information systems;Information systems;Mitigation strategies;Security preparations;System security;Security of data
Date:	2006
Issue Date:	2013-06-24T09:05:13Z (UTC)
Abstract:	Purpose - Modernized information systems (IS) have brought enterprises not only enormous benefits, but also linked information threats. Most enterprises solve their IS security-related problems using technical means alone, and focus on technical rather than managerial controls, which may imply potential crises. This study examines whether the security preparation of firms matches the severity of IS threats they perceive in developing countries, especially in issues concerning "people" and "administration". Additionally, this study discusses appropriate threat mitigation strategies for the four sectors as well. Design/methodology/approach - Using an empirical study, this study explores the past and current concerns of IS threats of firms in different industries, and the countermeasures prepared by them to protect themselves from such threats. The empirical data was provided by 109 Taiwanese enterprises from four sectors. Findings - The analytical results revealed the differences in both the IS threats concerned and the security scopes prepared among the four sectors. Moreover, the preparation scopes were not commensurate with the perceived severity of threats. All four industries rated the network as posing the strongest threat, following regulation and personnel issues, while among the countermeasures in use, these three issues have larger application deficiencies. Originality/value - This study concludes that the firms do not well prepare themselves against IS threats entailed to non-technical administration issues and discusses appropriate threat mitigation strategies for the four sectors. Specifically, firms should be aware of IS threats to their business and prepare suitable security protections.
Relation:	Information Management and Computer Security, 14(4)
Appears in Collections:	[企業管理學系所] 期刊論文

Files in This Item:

File	Size	Format
index.html	0Kb	HTML	280	View/Open

Loading...