Information and Computer Security: Volume 26 Issue 1

Cybersecurity and information security – what goes where?

Basie von Solms, Rossouw von Solms

The purpose of this paper is to define cybersecurity and cybersecurity governance in simplified terms – to explain to the boards of directors and executive management their…

A process model for implementing information systems security governance

Mathew Nicho

The frequent and increasingly potent cyber-attacks because of lack of an optimal mix of technical as well as non-technical IT controls has led to increased adoption of security…

A utilitarian re-examination of enterprise-scale information security management

Andrew Stewart

An action is utilitarian when it is both useful and practical. This paper aims to examine a number of traditional information security management practices to ascertain their…

Transforming information security governance in India (A SAP-LAP based case study of security, IT policy and e-governance)

Rashmi Anand, Sanjay Medhavi, Vivek Soni, Charru Malhotra, D.K. Banwet

Digital India, the flagship programme of Government of India (GoI) originated from National e-Governance Project (NeGP) in the year 2014. The programme has important aspect of…

Information security policy compliance: a higher education case study

Khaled A. Alshare, Peggy L. Lane, Michael R. Lane

The purpose of this case study is to examine the factors that impact higher education employees’ violations of information security policy by developing a research model based on…

Data security and consumer trust in FinTech innovation in Germany

Harrison Stewart, Jan Jürjens

The purpose of this study is to empirically analyse the key factors that influence the adoption of financial technology innovation in the country Germany. The advancement of…

Employee fraud and misconduct: empirical evidence from a telecommunication company

Anuar Nawawi, Ahmad Saiful Azlin Puteh Salin

The purpose of this study is to examine whether policies and procedures, one of the fundamental elements in the internal control environment, are adequate and effective in…