Human Dimension of Information Security: Autopsy of a Data Breach

Cybersecurity- Autopsy of a data breach
Name
Institution
Professor
Course
Date

Human dimension of information security
Information system security has become one of the fundamental security concern in
technology error. Most of the cybersecurity issues are caused by human inability to act
accordingly (Johnston & Warkentin, 2010). Human aspect in information security builds the
subject of discussion on how human factor might be a major loophole in fight against
cybersecurity. It is a reality human have had a great contribution to cybersecurity by failing to
adhere to required security measures. Data collection and storage by any organization should be
stored securely and in a secure manner. According to Prasad et al. (2011), confidentiality of data
must be guaranteed by any firm purporting to collect sensitive data for business use. In this case,
organization fail to meet the principle of confidentiality by not storing data while encrypted.
Encryption makes it difficult to make use of data even after hackers gain access to data storage.
Similarly, failure by organizations to put in place both authentication and authorization measures
makes data vulnerable (Chandler, 2012). Authentication is used by organization to determine
who has access to systems and data storage devices. On the other hand, authorization gives
privileges to authenticated system user to manipulate data. In regard to data collection, storage
and access principles, human factor has been rated as one of the most cybersecurity concern
causing data breaches. Most of the data breaches that have been reported shows cybersecurity
experts, novice system users and organizational management reluctant in enforcing information
system security measures (Proctor & Zandt, 2018). It is generally acceptable that, minimizing
human factor in cybersecurity can result to reduced data breaches.
Human dimension on Target case data breach
It is definite that human dimension contributed greatly to Target data breach. At first
instance, through use of automated penetration detection system, Targets security experts were