Preview

Data security

Better Essays
Open Document
Open Document
893 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Data security
Data Security and Regulations
SRK

Abstract
This paper discusses data security, its importance and implementation. The way threats are posed to information of organizations is also discussed. There are plenty of leakage preventive solutions available in the market. Few of them are listed in the paper. There is a list of regulations governing data security in financial and healthcare sector at the end.

Data Security and Regulations
As we are advancing into information age, more and more data about a people as well as corporations are being recorded and stored in electronic form in order to retrieve and transport easily. The data network technology is also evolving, as a result accessing and transferring of data has become extremely easy. Along with ease comes the issue of security. There are certain kinds of data that are public and there are those that need to be confidential. The problem comes with the confidential data; this data needs access by only those that are supposed to. This is where information security begins. Information security has been around from ages, even during the time of kings, data security was around. But currently, Information security is more important than ever as more data is available and access is also easy.
Personally Identifiable Information (PII), confidential information, intellectual property are the types of data assets that needs to be secured (Axelrod, Bayuk, Schutzer, 2009). PII is the data about an individual that can be used to identify the person; this data can be misused by anyone to get access to one’s financial information, medical information, etc. If this is not protected, there could be monetary or privacy damage. There are laws in most countries to protect PII but there are always loopholes and miscreants (Axelrod, Bayuk, Schutzer, 2009).
Confidential information is regarded so depending on the context and time. This could be designated by the owner of data or the data sharing parties



References: Axelrod, C. W., Bayuk, J., & Schutzer, D. (Eds.). (2009). Enterprise Information Security and Privacy. Norwood, MA, USA: Artech House. Calder, A., & Watkins, S. (2012). IT Governance : An International Guide to Data Security and ISO27001/ISO27002 (5th Edition). London, GBR: Kogan Page Ltd. Straub, D. W. (2008). Information Security : Policy, Processes and Practices. Armonk, NY, USA: M.E. Sharpe, Inc.

You May Also Find These Documents Helpful

  • Better Essays

    To properly secure an information system means protecting its files and other confidential information from misuse. The current speed of technological growth requires ever evolving security measures to follow these developments. As the members of Team “A” set out to address this need, it was necessary to discuss the requirements. The foundation of all concrete security plans require a detailed knowledge of all current systems, the tools needed to accomplish security needs and employee training. The implementation of these requirements will be outlined within a final Security Presentation.…

    • 2101 Words
    • 8 Pages
    Better Essays
  • Better Essays

    Swanson, M. (2006, February). Guide for Developing Security Plans for Federal Information Systems. Retrieved from http://csrc.nist.gov/publications/nistpubs/800-18-Rev1/sp800-18-Rev1-final.pdf…

    • 4134 Words
    • 12 Pages
    Better Essays
  • Good Essays

    This report gives a brief description the general security solutions planned for the safety of data and information that belongs to the organization. The outline will provide elements of a multi-layered security plan, and will indicate a general security solution for each of the seven domains of a typical IT infrastructure. Also I will describe a layer of security for each of the seven domains.…

    • 801 Words
    • 4 Pages
    Good Essays
  • Better Essays

    It255 Project Part 1

    • 634 Words
    • 3 Pages

    References: David Kim., and Michael G. Solomon. Fundamentals of Information Systems Security , 2012: Sudbury, MA 2012…

    • 634 Words
    • 3 Pages
    Better Essays
  • Better Essays

    Any information stored in an organisation has to follow the security and confidentiality procedures. Information security and confidentiality is the process where data is kept away from unauthorised access, disclosure, destruction, use or modification. It applies to both physical and electronic data. All organisations store a large amount of confidential information about their employees, customers, company’s status,…

    • 1681 Words
    • 7 Pages
    Better Essays
  • Good Essays

    Information that is stored in an organisation has to follow the security and confidentiality procedures. For example finances, customer’s and employee’s details should be secured and only certain members of staff should be able to access physical and electronic data unless you have been given authorisation. If information gets into the wrong hands it could have serious consequences and might lead to legal action.…

    • 777 Words
    • 3 Pages
    Good Essays
  • Good Essays

    BSA/310

    • 674 Words
    • 3 Pages

    In business, an information security is a set of policies to protect the companies and small businesses infrastructure, physical, and information technology assets, and to ensure that information technology users within the domain of the companies and small businesses comply with the rules and guidelines related to the security of the information stored digitally at any network within the boundaries of authority. In short, it can protect data from the outside and even inside threat. The data and information, which the companies and small businesses have, are arguably the most important assets. They should ensure the data confidentiality, integrity, availability, non-repudiation, authentication, and authorization. Most small businesses and companies must have information security to ensure their business and information assets. Information security protects data and controls how it should be distributed within or without the businesses boundaries. This means that information should be encrypted and may have restrictions placed on its distribution to the third party. Information security should protect the data from the outside threats such as:…

    • 674 Words
    • 3 Pages
    Good Essays
  • Satisfactory Essays

    NT2580

    • 1232 Words
    • 14 Pages

    Introduction to Information Security © ITT Educational Services, Inc. All rights reserved. Page 2 Key Concepts  Confidentiality, integrity, and availability (CIA) concepts  Layered security solutions implemented for the seven domains of a typical IT infrastructure …

    • 1232 Words
    • 14 Pages
    Satisfactory Essays
  • Good Essays

    The information stored by an organisation must be kept safe and secure at all times. This is to make sure that the organisation satisfies all of the legal requirements relating to the information which it keeps. The organisation has a duty of care to safeguard the information in its possession. This is to protect the security of its customers as well as its staff.…

    • 501 Words
    • 3 Pages
    Good Essays
  • Satisfactory Essays

    Is 411 Study Guide

    • 305 Words
    • 2 Pages

    Information Security Business Challenges and Policies the mitigate risk within the 7 domains. – p 77 - 83…

    • 305 Words
    • 2 Pages
    Satisfactory Essays
  • Better Essays

    Cmgt 400 Week 2

    • 1100 Words
    • 3 Pages

    There will always be some kind of the potential risks to the information maintained by any business or person because new vulnerabilities are found every day. Just recently, on August 7, 2012, a wired magazine reporter’s information stored on his Google account, Twitter account, MacBook, iPad, and iPhone where erased without the user wanting this done. A hacker that goes by the name of Phobia comprised the reporters Amazon account with a security exploit.…

    • 1100 Words
    • 3 Pages
    Better Essays
  • Satisfactory Essays

    User domain is considered the weakest link in an IT infrastructure as employees can be motivated to violate company policies. Areas of concern that can affect keeping data private, is: Lack of user awareness, because some users do not pay attention to what data is considered private and fail to secure data properly; Security policy violations, where some users continue to leave private data in the open where others can see it; Disgruntled employee purposely takes personal data to cause some sort of damage between the company and the customer; and Employee blackmail or extortion by threatening to distribute or sell the personal data in trying to obtain a promotion or monetary gain3.…

    • 517 Words
    • 3 Pages
    Satisfactory Essays
  • Powerful Essays

    Cyber Warfare/Motivations

    • 1841 Words
    • 8 Pages

    Layton, Timothy P. (2007). Information Security: Design, Implementation, Measurement, and Compliance. Boca Raton, FL: Auerbach publications.…

    • 1841 Words
    • 8 Pages
    Powerful Essays
  • Best Essays

    White Paper

    • 1119 Words
    • 5 Pages

    Information security basically refers to the methods and processes which are mainly designed for the safety of electronic, print or any other confidential information. It is designed to prevent the private and confidential information from unauthorized access, disclosure, misuse, destruction, disruption or modification. The terms computer security, information assurance and information security are used interchangeably. All these fields are linked with each other and share the basic targets of protecting the confidential information. These days several vulnerabilities are faced by IT companies and security organizations in Washington DC. They are mainly linked with the erosion of long duration of competitiveness and rational property loss. There are enormous risks associated with these types of security industries and business men. For this purpose, our company has introduced effective solutions to guarantee the security of information system (Pagani, 2005).…

    • 1119 Words
    • 5 Pages
    Best Essays
  • Better Essays

    Hacking Research Paper

    • 1378 Words
    • 6 Pages

    Confidentiality, integrity, and availability of your systems are of extreme importance. Confidentiality of the data within your network is the thriving force of business. This data is pertinent to the company and consumer. The information could possibly entail financial records or even identifying information. All of which, if found in the wrong…

    • 1378 Words
    • 6 Pages
    Better Essays

Related Topics