Towards protecting organisations’ data by preventing data theft by malicious insiders

Abstract

Purpose One of the most important Information Security (IS) concerns nowadays is data theft or data leakage. To mitigate this type of risk, organisations use a solid infrastructure and deploy multiple layers of security protection technology and protocols such as firewalls, VPNs and IPsec VPN. However, these technologies do not guarantee data protection, and especially from insiders. Insider threat is a critical risk that can cause harm to the organisation through data theft. The main purpose of this study was to investigate and identify the threats related to data theft caused by insiders in organisations and explore the efforts made by them to control data leakage. Design/methodology/approach The study proposed a conceptual model to protect organisations’ data by preventing data theft by malicious insiders. The researchers conducted a comprehensive literature review to achieve the objectives of this study. The collection of the data for this study is based on earlier studies conducted by several researchers from January 2011 to December 2020. All the selected literature is from journal articles, conference articles and conference proceedings using various databases. Findings The study revealed three main findings: first, the main risks inherent in data theft are financial fraud, intellectual property theft, and sabotage of IT infrastructure. Second, there are still some organisations that are not considering data theft by insiders as being a severe risk that should be well controlled. Lastly, the main factors motivating the insiders to perform data leakage activities are financial gain, lack of fairness and justice in the workplace, the psychology or characteristics of the insiders, new technologies, lack of education and awareness and lack of management tools for understanding insider threats. Originality/value The study provides a holistic view of data theft by insiders, focusing on the problem from an organisational point of view. Organisations can therefore take into consideration our recommendations to reduce the risks of data leakage by their employees.

Blockchain-Based Data Breach Detection: Approaches, Challenges, and Future Directions

“…They may also have a thorough grasp of the system's security rules and methods, allowing them to circumvent its security features quickly. Many non-blockchain-based studies [36][37][38][39][40][41][42][43][44][45][46][47][48][49][50] for detecting insider threat have been conducted. However, our focus in this survey is on blockchain-based data breach detection studies.…”

Tackling security and privacy challenges in the realm of big data analytics

“…Ensuring compliance involves understanding and adhering to the principles of data minimization, purpose limitation, and transparency. Cross-border data governance is particularly challenging, requiring strategies for managing data sovereignty issues and addressing the varying legal frameworks across jurisdictions [192]- [199]. Implementing robust data governance policies, encryption protocols, and secure data transfer mechanisms are essential to meet regulatory requirements and build trust among users and stakeholders, thereby fostering responsible and lawful big data analytics practices on a global scale.…”

Cybercrime dan Cybersecurity pada Fintech: Sebuah Tinjauan Pustaka Sistematis

“…Masalah utama yang dihadapi fintech adalah cybercrime yang selalu muncul modus baru seiring dengan perkembangan teknologi informasi dan komunikasi (Al-Harrasi et al, 2021;Vedral, 2021). Masalah cybercrime menyebabkan berbagai kendala meliputi regulasi penanggulangan cybercrime pada fintech masih belum kuat, hilang, berubah atau bocornya data dan informasi, serta pencurian kekayaan intelektual (Faya & Ogbuefi, 2019) yang menyebabkan merosotnya kepercayaan publik (Adeyoju, 2019;Boitan & Marchewka-Bartkowiak, 2021;Corbet & Gurdgiev, 2017;Cyriac & Sadath, 2019;Faya & Ogbuefi, 2019;Huang & Madnick, 2020;G.…”

“…Berkembangnya teknologi inovatif maka muncul peningkatan pencurian hak kekayaan intelektual berupa pencurian hak paten, hak cipta dan rahasia dagang yang diawali dengan serangan cybercrime pada fintech yang menjadi korban (Al-Harrasi et al, 2021).…”