期刊名称：International Journal of E-Business Development
印刷版ISSN：2225-7411
电子版ISSN：2226-7336
出版年度：2016
卷号：6
期号：1
语种：English
出版社：World Academic Publishing
摘要：Information security has received great attention from the government, businesses, and the public. As information becomes more valuable, it attracts more hacker attacks, and organizations are becoming more vulnerable to losses of valuable information. Data breaches cause losses of competitive advantages, revenues, reputation, trust, and customers. In some instances, they lead to the removal of top management. Thus, protection of organizational data becomes vital to the operations and survival of businesses.This study investigates the challenges that business enterprises face in information security and proposes a total security management model. An empirical study of recent major data breaches is examined. The study finds that while technology plays the central role in information security, more attention to security management, process and policy are needed. The paper ends with lessons learned, and a comprehensive security model is proposed.
关键词：Information Security; Data Breach; Information Risk; Authentication; Information Security Policy
