Premium Essay

A Case Study on How to Manage the Theft of Information

In:

Submitted By Maikanya
Words 3469
Pages 14
A Case Study on How to Manage the Theft of Information
Robert M Polstra III
Kennesaw State University
2004 Westwood Rd
Smyrna, GA 30080
404-641-8937

rpolstra@hotmail.com
ABSTRACT

1. INTRODUCTION

This paper shows the importance that management plays in the protection of information and in the planning to handle a security breach when a theft of information happens. Recent thefts of information that have hit major companies have caused concern.
These thefts were caused by companies’ inability to determine risks associated with the protection of their data and these companies lack of planning to properly manage a security breach when it occurs. It is becoming necessary, if not mandatory, for organizations to perform ongoing risk analysis to protect their systems. Organizations need to realize that the theft of information is a management issue as well as a technology one, and that these recent security breaches were mainly caused by business decisions by management and not a lack of technology.

After counter-terrorism and counter-intelligence, cyber crime is the third highest priority for the U.S. Federal Bureau [4]. With the rise of the theft of information and the lure of big profits for this stolen information, it is necessary for information systems to have the ability to protect this valuable asset. It is estimated that a credit card number unsupported by any other documentation is worth $10, and a credit history report retails for $60 [2]. Recent breaches of information systems that have lead to thefts of information have shown that management practices and not technology was part of the issue and in some cases the primary cause of the theft of the information. With each of these thefts, there is a third party committing a crime, but in each case, risk analysis could have been used to avoid or to help mitigate the
theft.

Similar Documents

Free Essay

Anger

...supervisor has asked you for your advice. She isn’t sure the company’s information system needs elaborate safeguards because the company has only a simple home page. However, employees use email extensively to contact suppliers and customers.  * Make a list of threats which may be vulnerable to the company’s information system. * Provide a comparative analysis of the types of safeguards would you suggest for the company’s information system. Many companies deal with threats to their information system daily. In the world today there are many different threats. Some main threats are: worms, viruses, Trojan horses, email hacking and denial of service attacks. All of these attacks can cause an information system to crash and lose data. While you have attacks you also have safeguard. I would recommend that a business use a strong firewall and a strong password protection. Finally I would give my staff less access to the information system. The minimum amount of people/computers in the information system the less of a threat happening. * After reviewing Case Study 14.1, imagine you are the manager of a large sports arena. Determine the types of hardware and software that you would use to help manage the facility. Provide a rationale with your response. The hardware I would personally use will be a LAN server. LAN stands for local area network. I will also use a security system that will provide me with information and films. I would also use a WAN server. WAN stands for wide...

Words: 483 - Pages: 2

Premium Essay

Student

...The case study is based on a potential data theft that occurred at Flayton Electronics. It emphasizes on the importance of security of company's data which if not given importance can result in heavy data loss which is a potential threat to the company's working as well as repute. The article keeps a focuses on how to manage the relationship that a company has with its customers. The article is about how the above stated company lost its customer trust just because of the information theft of its customers. The reason behind was the inefficient and inadequate security system of the company which it had for its data and information. The fraud involved the data about the customer included there credit card numbers, email addresses, it was misused. The theft was recorded later and than the CEO of Flayton Electronics took charge of the difficult situation. It was a tough time for all and everyone has to be accounted. The customers had kind of lost trust in the company and it was a very difficult task for the CEO to restore that trust as that trust was the basic aim of the company. The CEO made certain measures as is to satisfy the customers. It was also a guess that maybe someone from inside the company was involved in the fraud and so a clear and just investigation was to be held such that the trust and confidence of the employees was not shattered. Also that if such a case was that there was some person from inside the company responsible than it was a major...

Words: 325 - Pages: 2

Premium Essay

Research Paper

...Research Paper How does an imposed requirement of regularly identifying exposure to operational risk benefit an insurance company? Executive Summary The topic of this research paper is how an imposed requirement of regularly identifying exposure to operational risk benefits an insurance company. Risks occur naturally in all business, but if risk is not controlled, there are plenty of consequences that can arise. Insurance companies deal with risk everyday, ranging from fraud, car theft, health policies, and bonds and stocks. Operational risk is defined as the resulting risk that is present after financial and analytical risk is analyzed. Actuaries are able to use many mathematical and statistical techniques that are used to calculate these risks for insurance companies. Using probability distributions and random variables, actuaries are able to identify, evaluate, and manage or control these risks. Studies on car theft have been performed to determine the percentage of risk involved in this type of risk. Different theories and hypothesis have been developed to analyze these situations. This allows insurance companies to proceed with the possibility of emerging fraud. Banks also involve different types of risk that can be modeled under a process known as Linear Discriminant Analysis. Life insurance companies involve policies between insurers and policyholders. Every contract is different for every policyholder, so the risk involved with life insurance varies greatly. Calculating...

Words: 2616 - Pages: 11

Premium Essay

The Threat Within

...The threat within A study on insider threat by DSCI in collaboration with PwC About Data Security Council of India (DSCI) Data Security Council of India (DSCI) is a focal body on data protection in India, setup as an independent Self-Regulatory Organisation (SRO) by NASSCOM®, to promote data protection, develop security and privacy best practices & standards and encourage the Indian industries to implement the same. DSCI is engaged with the Indian IT/BPO industry, their clients worldwide, Banking and Telecom sectors, industry associations, Data Protection Authorities and other Government agencies in different countries. It conducts industry wide surveys and publishes reports, organizes data protection awareness seminars, workshops, projects, interactions and other necessary initiatives for outreach and public advocacy. DSCI is focused on capacity building of Law Enforcement Agencies for combating cyber crimes in the country and towards this, it operates several Cyber labs across India to train police officers, prosecutors and judicial officers in cyber forensics. Public Advocacy, Thought Leadership, Awareness and Outreach and Capacity Building are the key words to continue to promote and enhance trust in India as a secure global sourcing hub, and also to promote data protection in the country. For more information about DSCI or this report, please contact: Data Security Council of India Niryat Bhawan, 3rd Floor Rao Tula Ram Marg New Delhi – 110057 ...

Words: 7525 - Pages: 31

Premium Essay

Mobile Security Threats

...Title A research proposal submitted by Masisi Mulalo Supervisor: Moyo Benson Computer Science University of Venda 2014 ABSTRACT We live in a digital era where communication, information sharing and even business transactions is exchanged on mobile devices such as laptop computers, palmtops, tablet computers, smartphones and cell phones. The new age group of young people have never known a life without a mobile device with internet capabilities. Mobile Devices are an integral part of personal and social lives it is only logical that users should have awareness of security during the use of mobile devices. Individuals and organisations have both been beneficiaries on the rapid expansion of information and communication technologies (ICTs). Inevitably however, these offerings by mobile devices also bring about security vulnerabilities which users in Thohoyandou are not aware of. According to Lookout principal security analyst Marc Rogers, 2013, following simple precautions like sticking to the Google Play Store can ensure the security of a mobile device. This is rather not always the case as hackers and crackers make use of trustful applications to distribute malware. This study intends to outline security vulnerabilities and deliver clear recommendations on essential security technologies and practices to help mobile device users in Thohoyandou. Correct misconceptions or myths in order to bring about changes...

Words: 2908 - Pages: 12

Premium Essay

Manage Risk

...Phone no. Assessment site Assessment date/s Time/s The Assessment Task is due on the date specified by your assessor. Any variations to this arrangement must be approved in writing by your assessor. Submit this document with any required evidence attached. See specifications below for details. Performance objective In this assessment you are to analyse the risks identified in the case study, to assess likelihood and consequence of risks, evaluate and priorities risks, and determine options for treatment. You are also required to develop an action plan for treatment of risks, and communicate it to relevant parties. Assessment description Using the information gathered in Assessment Task 1 and the case study provided, examine the likelihood and consequences of identified risks, prioritise the risks and determine options for treatment of each risk. Using this information you are required to develop an action plan for implementing risk treatment, document the plan as required, and communicate the risk management plan to relevant parties. Procedure 1. Using the case study information provided in this assessment and in Assessment Task 1, develop a report for your manager (assessor) with the headings as described below: a. Likelihood – For each risk, assess the likelihood of the risk occurring. b. Consequence – For each risk, assess the consequence of the risk occurring. c. Priorities – Use a risk calculation table to assist in prioritising the risks. d. Options – For...

Words: 2750 - Pages: 11

Premium Essay

Computer Network

...Week 2 – Case Study SEC-280 11-9-2013 The first point that I will address consist on the multiple dangers that computer networks are exposed, that are in majority done by perpetrators that get access to servers of Windows and Linux to explode their vulnerabilities.. The use of these codes or malware in the form of viruses, worms, time bombs or any peculiar name this individuals use to give to their destructive toys, are a major concern to the protection of confidential information. Data so sensitive that in their majority is composing of identity, credit, and property information so well collected and compiler that is plenty for the creation of a clone of a company or a person. These identity theft atrocities are not limit to the software and information appropriation; also the attacks diminish computer performance, affecting their velocity and cause computers to crash. The CIO should possess a compendium of way’s to defend his network, and a rapid decision capability to take decisions in a short time period. Furthermore, in general terms security; as we can define “ the act of provide a sense or protection against lost, attack or harm”, can use or integrate a complete protection plan. Depending on the resources of the company the integration of a security plan that can integrate “the five pillars of security IT security operation: policy and audit management, access management, infrastructure and hardware security and incident response.” The real world presents to us a...

Words: 591 - Pages: 3

Premium Essay

Christianity

...| | | | Name | Celestine | Gumaj | | Personal Identifier | 65743f | | | Code | Gb45| | | Assignment Number | 780 | | | Part 1. How are people influenced by the society they live in? Dictionary.reference.com defined Influence as the capacity or power of persons or things to be a compelling force on or produce effects on the actions, behaviour, opinions, etc., of others while Oxford dictionary defined society as a community of people living in a particular country or region and having shared customs, laws and organisations. People can be influenced in the society they live in by the role of law that regulates adults as members of the society which includes how civil liability known as law of negligence and criminal liability such as theft could influence people. (The Open University 2013, Block 1, page 87). Civil law is used to settle dispute between individuals, the party at fault would have to pay compensation or comply with another suitable outcome. A judge would have to hear both party and make a final decision. On the other hand, criminal law is about creating laws for protection of all individuals within society and for the punishment of those individuals who break the law. Criminal law sets out types of behaviour that are forbidden, such as theft, and if such behaviour occurs then punishment follows. Negligence could occur as an act of omission which could foresee the injury of a neighbour. In other to guide against negligence, the ‘’neighbour...

Words: 1866 - Pages: 8

Premium Essay

Nt1330 Unit 3 Assignment 2

...service, bible study, and Men’s and Women’s Conferences, to Spiritual Resort Trips, and Teen Lock-In’s. Our goal is to allow youth, adults, and the elderly to lean on each other, and more importantly, lean on God. The main day of operation...

Words: 3281 - Pages: 14

Free Essay

Two Hacker

...Case Study 2 Closing Case Two “Two Hacker Hunters” 1. What types of technology could big retailers use to prevent identity thieves from purchasing merchandise? There are couple thing that would help big retailers from identity thieves. One thing is the authentication and authorization technologies such as biometrics. Another way is detection multiple transactions from different location. There should be a red flag if unusually large order or purchases in a short time. Last, retailers could notify the customer directly if they found unusual transaction and verify with the real customer if they truly buying something big. 2. What can organizations do to protect themselves from hackers looking to steal account data? Organizations can protect themselves from hackers by installing antivirus software for early detection and response. Have a content filtering, encryption and firewall. They must also have security people safeguarding against insiders or worker from stealing customer and clients information. 3. Authorities frequently tap online service providers to track down hackers. Do you think it is ethical for authorities to tap an online service provider and read people’s email? Why or why not? I personally don’t believe authorities have the right to go inside other people personal email to track down hackers. That mean we are losing our right of freedom. This is like spying on the very law abiding citizen’s personal space. I believe privacy is...

Words: 906 - Pages: 4

Premium Essay

Life Without Parole

...This solution of not just for non-homicide cases but for all cases. I believe that being fair to every juvenile is the correct approach to take so all cases will be able to adopt this solution to replace juvenile life without parole. In my opinion, this approach is also much more cost-effective, as keeping people incarcerated for life will end up being more costly in the long run. While released on parole, the now adult will not be restricted to a prison and will be earning his or her own wage while still on supervision in the...

Words: 954 - Pages: 4

Premium Essay

Ratio Analysis of Lafarge Surma Cement

...| | |United International University | |Assignment | |On | |Ratio Analysis of Lafarge Surma Cement | | | | | | | | | | | | ...

Words: 2345 - Pages: 10

Premium Essay

Aa Afaff

...Security Breaches And Identity Thefts Information Technology Essay Current online marketing strategies deliver immense benefits to the modern global firm by way of better market reach, cheap and convenient transaction possessing, multiple online payment options and real time consumer data management. Marked benefits are commonly discernible in the area of internet based business-to-business or B2B, and business-to-consumer or B2C e-commerce models. These online commerce models rely on digital marketing for their success, which in turn in essentially a remarkable success of information technology and data management techniques. However, the growth of digital marketing is getting severely affected by the misuse of technology by criminals and unscrupulous persons in various ways. Such misuse of technology encompasses identity theft, data loss and other data security breaches. Increasing information security breaches and cases of identity theft in recent times threaten the marketing of products and services either online or offline like never before. This paper attempts to understand issues and outcomes of identity theft, data loss and security breaches on the present and future global marketing environment by examining several secondary sources of information. 2. What is identity theft? We can help you to write your essay! Professional essay writers Our writers can help get your essay back on track, take a look at our services to learn more about how we can help. Essay Writing...

Words: 3128 - Pages: 13

Premium Essay

A Case Study on the Difficulties Faced by Tm Point Kuala Selangor in Operating It Shop

...A CASE STUDY ON THE DIFFICULTIES FACED BY TM POINT KUALA SELANGOR IN OPERATING IT SHOP BACHELOR OF BUSINESS ADMINISTRATION WITH (HONS) OPERATIONS MANAGEMENT FACULTY OF BUSINESS MANAGEMENT NOVEMBER 2009 AbstrAct ABSTRACT This case study will be conducted in TMpoint Kuala Selangor. I would like to identify the difficulties faced by this organization in operating it shop. As this company is a serviceoriented organization, they need to satisfy customer’s needs and wants. Sometimes, they fail to achieve due to some problems or lacking. In this case, I will use the customer’s data of fixed-line termination and monthly statistical data on customer complain to explore the symptoms of low customer satisfaction. I also will conduct some observations in order to gather relevant data. The computer software package which is Statistical Package for Social Science (SPSS student Version 14.0 for Window) will be used to analyze the data that have been gathered, furthermore to identify the major problems faced by this organization. There are some symptoms that has been identified; there are increasing number of customer complain, fixed-line termination, not well-educating the customers and shortage of worker. When the problem has been identified, conclusion and recommendations will suggested to the organization in order to be the best service provider in the world. They need to take corrective action if they want to ensure company’s survilvalness. vii TABLE OF CONTENT...

Words: 13705 - Pages: 55

Free Essay

Onlinde Dating

...Felix Chevasco Professor: LoRe English 101 Date: 12/10/12 Traditional Courtship vs. Online Dating The Difference between Traditional courtship and Internet Dating When I was listening to my favorite talk show, Focus on the Family, they talked about the advantages of Internet dating. This allows the listeners, who got married prior the new millennium, to ponder the benefits of online dating, which were absent during their time of courtship. In traditional dating initial eye contact and study of the personality of the person is an important element in determining chemistry. However, what makes traditional dating best is the boundary and purpose that courtship provides. In contrast, online dating is more casual. In traditional dating, couples were introduced to each other by a friend and relative, or they met in a social activity such as their local church, school or family reunion. Nowadays, it is not necessary to meet people face to face in order to start a relationship. The internet changes our lives forever with chat rooms, social networks or online websites. More and more people are drawn to using the internet as a form of dating, with a high cost, and are unaware of the danger that you can face meeting with a stranger. Traditional dating is much better that online dating because traditional dating gives the couple the complement of courtship, commitment and purpose. Traditional dating is not only based in a feeling or a rush gut reaction. It gives the couple the opportunity...

Words: 2149 - Pages: 9