Information Security Management Practices: Expectations and Reality

Abstract

Understanding the cyberspace and awareness of its effects impacts the lives of all individuals. Thus, the knowledge of cybersecurity in both organizations and private operations is essential. Research on various aspects of cybersecurity is crucial for achieving adequate levels of cybersecurity. The content of this scientific monography provides answers to various topical questions from the organizational, individual, sociological, technical and legal aspects of security in the cyberspace. The papers in the monography combine the findings of researchers from different subareas of cybersecurity, show the effects of adequate levels of cybersecurity on the operations of organizations and individuals, and present the latest methods to defend against threats in the cyberspace from technical, organizational and security aspects.

Assessment of Higher Education Information Security Risk Management Practices in Tanzania

“…Lack of risk management teams affects the implementation of ISRM activities in the institutions. A study by Prislan et al, (2017) explained risk management team works with an open mind and enthusiasm towards understanding risk and being able to mitigate it.…”

Contributing Factors for Successful Information Security Management Implementation: A Conceptual Model

“…In the preliminary stage of ISM, the top management of the organisation [5] needs to formulate sound strategic planning [6], [8], [11], [13], [18] including the business processes [7] and the organisation"s IS requirements [6]. Realistic strategic planning needs to allocate enough resources [6], [18], [19] including financial resources [5] and human resources [3], [20]. Human resources which are needed as drivers of ISM activities and processes have substantial impacts on the ISM success [6].…”

“…This team acts as the intermediary between the top management, technical team, and audit team. The team is responsible for organising ongoing training and awareness programmes [5], [22], [23] managing resources appropriately, coordinating the ISM documents, and presenting the ISM implementation reports to the top management [19]. Ongoing training and education [23] will ensure the dedicated team members are competent by developing the right skills [6] with specific competencies concerning their job scope [19] and technology management is in place [6].…”

“…One of the reasons for these phenomena is that the organisations do not know how to successfully implement ISM [3]. Besides, current ISM practices are less effective [4], [5] and do not suit the current needs of organisations [3], [6] which cause organisations to continue to face IS risks. Moreover, organisations tend to emphasise on the technical aspects, [7] hence ignoring the non-technical aspects in implementing ISM [5].…”

“…Besides, current ISM practices are less effective [4], [5] and do not suit the current needs of organisations [3], [6] which cause organisations to continue to face IS risks. Moreover, organisations tend to emphasise on the technical aspects, [7] hence ignoring the non-technical aspects in implementing ISM [5]. As a result, the organisations" critical information has been attacked, leading to triggering major disruptions and enormous financial damage [8] and reputation loss [9].…”