Information Security Issues

Running head: INFORMATION SECURITY ISSUES
1
INFORMATION SECURITY ISSUES
Student’s Name
Institutional Affiliation
Date of Submission

INFORMATION SECURITY ISSUES 2
Information Security Issues
Information is critical in every organization and for every individual. Information, when
exposed to unauthorized personnel, causes a lot of inconveniences in organizational and
individual reputation. Technological advancement in the current world is responsible for
information explosion. The high information availability and the dependence on computers
create an excellent platform to threats of information attacks. The aspects of information security
and cybersecurity have been introduced to guarantee the protection of computer systems and
information from threats. Cryptography is highly essential in this technological era. The
technology significance can be seen by many since it helps with the protection of the information
which travels over the internet. Cryptology has managed to offer security since this technological
era has been vulnerable to hackers, viruses and electronic fraud. In my opinion, cryptography
will involve the use of encryption which will offer protection to the content found on the
internet. The material will include emails, telephone calls which uses the internet as the main
medium and any transaction which may occur on the internet.
Information security ensures the integrity of information in the organization by providing
accurate information about all the activities taking within the organization. The organization
ensures the integrity of information by setting measures to hinder manipulation and loss of
information. File management practices can be used to ensure the monitoring of organization
processes to detect any errors in the organization information. Through the use of strong
passwords, facial recognition, and biometric login systems organizations can ensure
confidentiality of information. Unauthorised access is can be avoided by having an effective
information security program in the organization. The information available in the organization
guarantees successful transactions. Delay or denial of service attacks brings great losses to the

INFORMATION SECURITY ISSUES 3
organization. Information technology managers should ensure that t information security
measures are implemented to guarantee the availability of information to customers and
organization employees.
Most companies have benefited from advancement in technology because the operations
are fast and convenient. Therefore, security must be provided to the system of companies to
evade intruders from accessing critical company information. Security engineers should evaluate
the system frequently to ensure codes get developed to keep information more secure.
Cryptography assists in writing codes that align with specific projects and requires developers to
generate a sustainable system. The standards of cryptography solve most challenges encountered
by developers; thus, the standards of a company dictate the implementation plan (Suykerbuyk &
Merry, 2015). Therefore, the report addresses how implementation of cryptography and
fundamental management solutions will tackle the risks.
Information security is critical in the organization since it ensures safe operations of
applications used in the daily functioning of the organizations. Application software forms the
basis which external attacks poses a threat to organization information through malware attacks.
Information security plays a crucial role in ensuring the security of data stored in organization
devices. Through the installation of antivirus software, computer systems can be protected from
external threats and aid in day to day operation in the organization.
Method of Defining Criticality of Data
All data owners get identified because each member in the management supervises a
particular category in the business entity. Therefore, the data owner gives access or may appoint
a person to allow access to the unit in the system. Moreover, any security threats get corrected
when the data report the violations in due time. Secondly determining all custodians of the data

INFORMATION SECURITY ISSUES 4
plays an important role since the IT department is held accountable in this sector. Therefore,
their main role involves includes fulfilling security policies of the company and backing up
information. Classifying data assists in outlining the type of information shared to different
stakeholders of the company (Shin et al., 2015). After that, a risk assessment process follows
where the existing challenges get addressed, and upcoming issues get blocked by formulation of
new strategies t curb the threats. Mostly, encryption protects sensitive information by converting
plain texts into a form that is unreadable. Therefore, the developers strengthen the encryption
resulting in the safety of the data.
Each process of a business can get measured through checking if processed occur
properly. Therefore, the firm could get subjected to high environmental, financial and legal risks.
High-risk activities contribute to the functionality of business; hence, more attention is dedicated
to them. Where an individual has direct contact with the customer is critical because the
feedback from the services offered matters.
Through the implementation of information security policy, the organization ensures that
all employees in the organization know the importance of information security. It is the
responsibility of IT managers and general managers to ensure that the policy is implemented and
every employee in the organization observes the stipulated regulations. Information is the crucial
element of undertaking any transaction in the organization. All operations in the organization
depend on the availability of information (Bodnar, 2001). Also, the organization holds both its
information and that of customers; hence, there is a need to ensure customer information is
secure to enhance customer loyalty.
Employee information security awareness is crucial in ensuring information security in
the organization. Insider attacks are the most severe attacks on the information in the