...Behnood Momenzadeh; Shakthidhar Gopavaram; Sanchari Das; L. Jean Camp Purpose The purpose of this paper is to propose practical and usable interactions that will allow more informed, risk-aware comparisons for individuals during app selections. The authors include an explicit argument for the role...

... on premise systems. These users feel that the public cloud may still be currently too immature for mission-critical system deployments; however, they do expect it to be more secure in the future as the service models become more mature and better technologies become available. None of the cloud adoption risk...

...Adrian Munteanu Purpose This study aims to argue that in the case of quantitative security risk assessment, individuals do not estimate probabilities as a likelihood measure of event occurrence. Design/methodology/approach The study uses the most commonly used quantitative assessment approach...

..., DRP preparedness, documentation, employees’ preparedness and awareness and the most significant physical and logical risks that pose the most threads to drive the development of the DRP, etc. Design/methodology/approach The authors surveyed publicly listed companies on the ADX using...

...Reza Alavi; Shareeful Islam; Haralambos Mouratidis Purpose The purpose of this paper is to introduce a risk-driven investment process model for analysing human factors that allows information security managers to capture possible risk–investment relationships and to reason about them. The overall...

...Mario Silic; Andrea Back; Dario Silic Purpose – The purpose of this paper is to identify the technological risks in the context of open source software (OSS) and suggest an integrative OSS risk taxonomy. Design/methodology/approach – The authors conducted an extensive literature review...

...Yung-Shen Yen Purpose – This paper aims to explore how perceived risk affects customer loyalty in e-commerce and how switching costs mediate in the relationship between perceived risk and customer loyalty. Design/methodology/approach – In this paper, structural equation modeling...

... to measure the current situation of IS management through the use of a maturity model and provides a subsidy to take appropriate and feasible improvement actions, based on risks. A case study is performed, and the results indicate that the method is efficient for evaluating the current state...

... (Yager, 2002). © MCB UP Limited 2002 Internet Information services Risk Technology Security The Internet has revolutionized the capacity to share information across organizations, resulting in radical transformation of organizational practices for procuring supplies, delivering...

... capability maturity model (SSE‐CMM) is proposed to specify design details for the three defined processes: risk, engineering and assurance. By means of an object‐oriented security design pattern, security design covering impact, threats, risks and countermeasures for different parts of an e‐commerce system...

... of restrictions on the users, the risk involved and the cost of the security are some of the factors that need serious attention when discussing security for mobile computers. We propose minimum security measures taking into account the minimum security needs already identified. Various situations were examined...

...L. Labuschagne; J.H.P. Eloff The major reason why most people are still sceptical about electronic commerce is the perceived security risks associated with electronic transactions over the Internet. The Internet, however, holds many opportunities that could mean survival or competitive advantage...

...S.A. Kokolakis; A.J. Demopoulos; E.A. Kiountouzis The increasing reliance of organisations on information systems connected to or extending over open data networks has established information security as a critical success factor for modern organisations. Risk analysis appears to be the predominant...

... with a thorough analysis of sensitivity and criticality. Risk analysis methodologies, like CRAMM, provide the ability to analyse and manage the associated risks. By performing a risk analysis on a typical small enterprise and a home‐office set‐up the article identifies the risks associated with availability...

...Sharman Lichtenstein A risk assessment method is used to carry out a risk assessment for an organization’s information security. Currently, there are many risk assessment methods from which to choose, each exhibiting a variety of problems. For example, methods may take a long time to perform, may...

... and assesses the risks associated with employees working on sensitive material from a remote site. Postulates a framework for threat and risk assessment with a generic model, and a specific example using a hypothetical telework situation. Computer security Ergonomics Quality of working life Risk...

... located in generally less secure office environments, the risk of disruption increases, owing to lack of physical security, support services limitations and absence of site monitoring. The net result is higher business impact coupled with greater exposure. Identifies the elements that are at risk...

... and suggests some currently possible solutions. © MCB UP Limited 1994 Communications Information systems Information technology Mainframes Networks Risk Establishing information security in a downsized, multi‐platform,multi‐vendor, enterprise‐wide information technology (IT) environment...

... be understood remembering that small, intermittent failures can be worse than complete collapse. Risk exposures can be prioritized and contingency plans established. Duplicated carrier communications, private network triangulation, and virtual private networks are considered as well as ISDN and switched backup...