Analyzing Employer-Employee Data

This assignment examines the implications of using linked employer-employee data in research. It delves into various applications, including understanding benefits allocation, wage compression, and bargaining dynamics. The analysis emphasizes the importance of addressing privacy concerns, ensuring data security, and upholding ethical research practices when dealing with sensitive employee information.

Cloud Security
Name of the student
Name of the University
Author Note

Introduction:
The DAS or the Department of the Administrative Service provides numerous
services to other departments at Australia. The services have been delivered from the data
centre of the department.
The Software as a Service has been the licensing model and the software delivery
hosted centrally. These services have been provided from the data centers of DAS.
The report has covered the security and privacy about the employee data. Next it
has discussed the problems regarding the digital identity. Lastly it has undergone through
the problems about data sensitivity and the provider solution.
1. Security of Employee Data:
S.No Security
Threat/Risk
Description
Likelihood
Impact
Priority
Preventive Actions Contingency Plans
Student 1
R.a. Non-existent of
Security
Architecture
VL VH VH Pre-existent of
Personnel for
designing security
architecture of the
system (Sun, 2012).
Individual out of
the organization
for expert advice.
R.b. Client Side
applications and
software that
M VH VH Implementation of
robust patch
management
Checking Regularly
updates of
security software

are not patched program into the
system
Student 2
R.c. Spear Phishing
and Phishing
H H M installation of
professional
enterprise level by
DAS
Providing regular
and proper
training to the
employee of DAS
about the internet
security.
R.d. Websites M H M Anti-malware device,
Updated firewall and
antivirus
Installation of new
anti-virus
Re. Poor
Configuration
L VH VH Implementation of
configuration
management policy
for the hardware
used to connect with
internet.
Implementation of
new Network
Access Control
Solution.
Student 3
Rf. Mobile Devices L L VL Using personal and
protected devices
Encrypting files
that are being
saved in the
database using
mobile device.

Student 4
Rg. Cloud
Computing
VH H VH Cross checking the
offered services by
SaaS and whether it
accomplices with the
information security
system requirements
of DAS or not.
Check whether
offered application
is applicable with
privacy acts and
Family Education
Rights or not.
R.h. Removable
Media
H VH M Putting “auto run”
feature of the system
into disable mode.
Training about
how to use
external device in
the organization
premises.
R.i. Botnets VH H H Implementation of
strong security
architect
Analysis for
encrypting the data
sent over the internet
(Asghari, Eeten &
Bauer, 2015).
Implementing
holistic approach
to data security of
the system.
R.j. Zero-day
Attacks
H H H Recruiting highly
experienced IT.
Keeping abreast of
less software
patches.

Existing security threats to Employee data
Likelihood - VL, L, M, H, VH
Impact- - VL, L, M, H, VH
Priority- - VL, L, M, H, VH

Explain issues
1. The threats identified in the previous decades are same almost. This continued to
plaguing the business at present. The popular threat in the in-house HR database has
been the additional privileges as the employees are been granted. The DAS could fail
in updating the access privileges for the altering roles of the employees at their
organization. The users could also abuse the legitimate database privileges for
unauthorized reasons (Lafuente, 2015). There could also be the attacks regarding the
database injections. One of the primary types of these attacks has been the NoSQL
and the SQL injections.
2. The SQL injections are targeted to the traditional data base systems. The other one
has been targeting on the platforms of the big-data. In both the scenarios the attack
of the input injection done successfully could deliver the attacker with the restricted
access into the entire database. Then there has been the malware. This is a long
lasting danger. This has been used to retrieve the sensitive data through the original
legitimate customers using the damaged devices. The following one is the exposure
of the storage media.
3. The media backup storage has been unprotected regularly from the assaults. In the
same way the numerous security beaches has been incorporated with the theft of
the tapes and discs supporting the database. There has been exploitation of the less
powerful databases also. This has been taking about a month to fix the issues. The
attackers have been presently knowledgeable regarding in which way to rob the
unpatched databases or databases having default records and configuration
parameters.

4. There have been risks that have generated from the sensitive data. These data have
been left unmanaged. The organization could struggle to store the appropriate stock
of the databases and the primary information objects that are present inside that
(Felbermayr, Hauptmann & Schmerer, 2014). Now, this has been the original cause
lying behind a huge amount of events about the data breaches due to human
carelessness.
S.No New
Security
Threat/Risk
of employee
data
Description
(after
moving to
Saas)
Likelihood
Impact
Priority
Preventive
Actions
Contingency
Plans

Student 1
R1.a Insider H VH VH 1. Establishment
of well defined
privilege rights
of the
management
system
2. Enforcing the
rights
introduced in
the privilege
1. Annual
training and
awareness
programs by
DAS.
2. Audit
Programs
R1.b. Poor
Passwords
VH M H 1. Implementing
more advanced
authentication
capabilities
2. Using
autopassword
generating
software
Training
programs for
creating
strong
password

Student 2
R1.c. Physical
Security
M VH H 2. Enforcing the
security system
2. Establishment
of physical
security system
at places where
super computer
is located.
(Caroll, 2014).
Use of
physical
barriers
R1.d. Social Media M L VL 1. Introducing
policy
forbidding
access to
selected social
websites
2. Reinforcing
that policy
Training the
employees
about security
threats
Student 3

Student 4
R1.e. Social
Engineering
M L VL How to avoid
from being
manipulated by
an unwanted
individual, and
be safe (Mann,
2012).
Training
employees
about self
responsibility
on securing
password.
New Security Threat to Employee data (after moving to SaaS)
Likelihood - VL, L, M, H, VH Impact- - VL, L, M, H, VH Priority- - VL, L, M, H, VH
Explain issues
1. The initial risk originating after incorporating the SAAS has been the usage risk. This
has been indicating the risk incurred by DAS. The basis has been the manner in which
they use the specific application of SaaS. At first it has been found whether the
organization is using the application about the functions of critical business. Then it
is to be identified whether the app could have stored the sensitive data. Since the
reply has been negative in both the situations, the application must go to the lower
risk rank very quickly (Pfeifer, 2016).
2. The following one is the risks regarding the information security. It has been seen
that how DAS could use the SaaS application. Next they could move towards the
risks of information security. The using of the risk concentrated on how the DAS has
been using the application. Hence the security risk of data has been focusing on the
manner in which the service providers have been taking care of the data.

3. The subsequent one is the operational risk confirmation from the provider of SaaS.
This has been tending the manner in which the supplier has been dealing with the
daily operations. Despite this, DAS must consider the data security risk as the subset
of this problematic range. However they come out of that due to its significance
(Kristal, 2017). Lastly there have been the application risks originating from the SaaS
providers. This has been the intrinsic problems created by the manner in which the
application was developed.
Severity of risk and threat to security employee data
Probability
Very High R1.a R.f,R.i
High R.c, R.j R.h, R1.a
Medium R1.d, R1.e R.d R.b,R1.c
Low R.f R.d
Very Low R.a
Severity Very Low Low Medium High Very High

For the employees, the information loss due to the workers has been in terms of
passionate replies. This has been more when contrasted with the retailer and the
association they have been working with. The reason behind this has been that the victim
could essentially disjoin the connections and the business at any other place. As viewed
from the perspective of psychology, the ability to pick any item has been the monstrous
differentiator for the victim of the breach. There has been no necessity to purchase the
items from them. The condition also includes working with particular organization giving
them the authority for opting the condition and the manner in which the relation develops
(Müller & Neumann, 2015).
The capability of picking is eradicated while accepting the notice of the breach of the
Personally Identifiable Data or PII from the DAS. The way in which they must act and reply
and where they have been venting their dread, outrage and disappointment has been
pointing to the additional hazard for the DAS. It has been precisely what has offended the
bar of the party that is preying on.
During the research on the event and to approve what has actually occurred, the IT
employees of the organization and most of the C-suite probably stopped the general
operations keeping the business at hold. As any event gets changed to be open and notices
are provided to the workers, the next phase of the internal disturbance commences (Smith
& Ross, 2014). The workers have been investing extra measure of time during the day time.
This is done by exploring the administrations that are made available. It is done by calling
the restoration group of the call centre for effectively views how they must protect their
own selves during the advancement.

2. Privacy of Employee Data
a. Existing privacy threats and risks to the privacy of employee data
S.N
o
Privacy
Threat/Risk
Description
(Employee
data)
Likelihood
(Probability)
Impact
(Severity)
Priority
Preventive
Actions
Contingency
Plans
Student 1
R.a. Computer
monitoring
VH L H 1. Implementing
policies that are
legal rights for the
employers
according to the
laws in Australia
(Miller, 2012).
Employers can
block certain
domains and
stop
monitoring

R.b. Telephone
monitoring
L H VL Organization
should implement
policies according
to the Right to be
free from
harassment and
discrimination
(Miller, 2012)
Fixed lines
should be
there of office
only.
Student 2
R.c. Video
Surveillance
H H VH Employees should
be introduced
with the written
documents in
which what they
can do or not are
listed.
Employees
should be well
disciplined and
honest

Student 3
R.d. Monitoring
emails
M H VH Private and secure
portal should be
used by
organization
Employees
should make
agreement
with the
organization
on not
disclosing
internal
information.
Student 4
R.e. Monitoring
Internet
Usage
L VH VH Proper firewall
and antivirus
should be
implemented in
the systems
Training
program for
the employees
on how to use
safe internet
and secure
websites.
Explain issues
1. The initial privacy risk for the employee data has been the discrimination. This is also
known as the discrimination by algorithm. This has been the bias happening as the
predefined data types and the data sources gets unintentionally or intentionally
treated separately than the others. It is the selective filtering of data done by the
service provider on any network.

2. The usage of DAS in predictive analysis to make the decisions imposed negative
impact on the clients in the direct manner. This has been inhibiting freedom of the
DAS. The most crucial risk occurring here has been that it is used to conceal
discrimination. It is on the basis of the illicit criteria. It has been the justifying the
disparate affect of decisions on vulnerable people (Kristal, 2017). However, the risk
stayed to be very large. The fact behind this is that various IoT devices are remaining
unsafe. Then there has been the anonymity leaving behind. It has been a kind of
information sanitization. The intent here is to protect the privacy. This process is
meant to encrypt or eradicate the personally identifiable information or PII from the
data sets. This helps in keeping the data describing the people remain. Data
anonymization is used to destroy the tracks or the electronic trials on the data. The
electronic trail has been the data that has been left behind as anyone sends data
over any network. This has been technique that never snatches the main field layout
like the size, data type and position of the data that is anonymized. Hence the data
has been looking very realistic in the test environments of data.
3. Since DAS has been requiring the anonymization of data to use for various causes.
They might find that to be largely difficult. These changes have been absolutely
impossible to effectively anonymize the data. This is done so that the related people
can never be recognized (Finkin, 2015).
4. At last the data can be brokered. This indicates that various organizations, also
known as the data brokers have been gathering and maintaining the information of
millions of customers. These data are analyzed, packaged and sold without any input
or consumer permission.

5. The DAS has been collecting and selling consumer data. This data has been utilized to
profile people without must controls and restrictions. From the previous few
decades, the data brokers have been possessing the field day for selling entire
information that could be scooped by them from anywhere they have finding online.
The practice is rising and unfettered still the privacy laws restricting the usage getting
enacted. There is no or very minute accountability of the guarantees that this
information is perfect.
S.No New Privacy
Threat/Risk of
employee data
Description
(after moving to
Saas)
Likelihood
Impact
Priority
Preventive Actions Contingency Plans
Student 1
R.1.a. Distant location
of the corporate
control
VL H H Corporate control should
be located nearer than
the SaaS application
provider in this case.
DAS con look for
another service
provider
Student 2
R.1.b. Information
saved in the
cloud may be
compromised
H VH VH Proper encryption to the
data and well updated
server
Can move to third
party

Student33
R.1.c. Malicious
viruses can
attack the
system and
destroy
personal
information.
Experienced IT team
should be implemented
Guidelines from
ITs
who are much
VH VH VH experienced in this
field (Humphreys,
2016).
Student 4
R1.d. Types of
information
stored in the
cloud
VL L L Not much sensitive
information should be
saved
Employees should
be asked what
information they
want to share
which will not
affect their
security
New Security Threat to Employee data(after moving to SaaS)
Likelihood - VL, L, M, H, VH
Impact- - VL, L, M, H, VH
Priority- - VL, L, M, H, VH
Explain issues

1. This migration of SaaS leaving behind the traditional methods of the operation can result in
raising concerns related to the privacy of the information about the employees that is being
saved in the database. Using SaaS application will allow the DAS to manage the
organizational operation more efficiently and effectively but it might cost to the privacy of
the employees saved in t6he form of files in the database. SaaS allow users to store the
information and data on cloud and provides access to the users at any place, which make
this information more vulnerable in manner of unauthorized access or data breach. This
whole system has a corporate control, which is situated at more distant place according to
the case study. Thus, this may lead towards the extreme needs of experts and more
integrity for managing the various steps that can involve maintenance, data loss and for any
other unwanted event. Even incorporation of principles relating to the privacy of the
information that is being collected by the organization are defined, but despite of that many
human errors and left behind objectives may lead to several privacy issues for the
employees of DAS.
2. Since, the data that is being stored in the cloud will contain all the information related to
the employee, including very sensitive and critical data about them like, medical details,
bank account details, permanent address (Rusinek & Rycx, 2013). Uncertainly, if any data
breach happens or any unauthorized access to the database happens, it may lead to the
expose of such very personal and sensitive information of the employees working in DAS.
This might happen, because of the same platform being shared among various users and
virtual operations that is being conducted for the organizational work.
3. Another threat that may affect the privacy of the employees after migrating to SaaS
application in DAS is “insider”, which simply means, an individual with legitimate access to
the network provided by SaaS in DAS. The information that is being accessed by the insider

are very easy to be manipulated, lost, or stolen by any unauthorized and unwanted
individual. This activity may lead towards expose the privacy of individual despite of the
matter that whether it was carelessness or any attempt.
4. Poor password can also be considered as the threats towards the privacy issue of the
employees. Unauthorized users are cracking easy passwords nowadays very easily. The
system or the cloud server access should be well protected by strong passwords.
Severity of risk and threat to privacy of employee data
Probability
Very High R.a R1.c
High R.c R1.b
Medium R.d
Low R.b R.e
Very Low R1.d R1.a
Severity Very Low Low Medium High Very High
In this new era of technology in which inter is the biggest achievement, cloud is the
biggest space where data can be stored and access those information from any place via
internet. However, today’s biggest and serious threat on the internet is data breach, and the
data being saved on the cloud are more vulnerable to such cyber-attacks. The data that is
being saved in the database of DAS using SaaS implication may become prey of such
unwanted incidents and cause severe damage to the personal information of the

employees. The severe damage expressed is here is related to the expose of personal
information. The information that is being saved in the database includes personal address,
medical data, bank account details, and social security number, which are enough to be said
very personal and sensitive information (Müller & Neumann, 2015). Expose of such
information like bank account details, or credit card details possesses very high significance
of long-term effect on the employee. This may cause DAS serious damage as per the
fraudulent act as any case filed against DAS for the irresponsibility of keeping data safe.
For the operations based on Cloud Data, needs proper credentials to access the
server provided by SaaS, which include proper id and password. Loss and theft of such
crucial information has been also an issue in this case, because this may allow an
unauthenticated user to access the server and manipulate the data and information saved in
the server. Data breaches related to the government agencies allows anyone to create
synthetic IS for the stolen sensitive data of the government which includes trade secrets and
the patents. Concerning this situation DAS also required consideration on the information of
the employee that is being saved using SaaS application on the cloud as well as the legal risk
related to the information that may expose and cause privacy issues to the employees. If
anyhow DAS is not able to protect the information of the employees that is being saved in
the database, employees have right to file a case against DAS, which is not beneficial for any
organization’s development. DAS should give priority to both, the data being saved about
the organization itself as well as the data being saved about the information of the
employee.

Digital Identity Issues
Student 1Student ID
There may be several threats and risks to the digital identities of the employees after
moving to the SaaS migration in DAS, which are discussed in this paragraph. Several actions
of the individuals are getting associated with the digital identities because of the automated
technology of face recognition, tagging, tracking and other digital identification system.
These connections with the digital identity may lead to the loss of privacy and security of the
employees working in DAS (Müller & Neumann, 2015). This implication may lead to several
threats and risks towards the digital transaction made for any payment mode. The topic
‘cloud’, on which this whole report is being discussed, generates the better scope for the
digital identity theft made by any unauthenticated person.
2. Student 2 Student ID
There are several ways by which DAS can be manipulated among which one situation
is that the same copy of information can be copied and feed into the system through digital
communication and anyone could get access to the system. This may lead any unauthorized
user to access the system of the employees of data and after getting access they can
manipulate or expose the information or the data that is being saved by that employee on
the system (Abowd, McKinney & Zhao, 2015). This can also provide window to the hackers
who can breach the system and may lead to several damages to the information that is
being saved about the DAS and their employees. This system technically works on pattern,
and pattern may be confusing or attempts can be made to confuse the system.

3. Student 3 Student ID
Various efforts has been made on the authentication of the individual as a solution in
the place of addressing strength of the underpinning attribute authorization and process of
collection. It has been also seen that transaction being completed without any activity of the
user. There has been development of the consensus in place of driving action towards the
privacy and security issues related to the employee of any organization (Rusinek & Rycx,
2013). These unauthenticated attempts made by the unauthorized user may result in
negativity among the employee if certain breach happens to the data saved in the database
of HR of DAS.
4. Student 4 Student ID
Related to the digital identity of an individual, various approaches have been made
on the deployment of agreements about the process and the standard, which is far away
from creating a complete solution for the accurate digital identity. Thus, it will not be
beneficial in any aspect for the DAS like private sectors or any other organization until now.
Provider Solution Issues and why?
The managing process by DAS to manage HR manager and Contract manager can be
highly private and complicated. There have been primary features and capabilities of DAS
for the cases, which has been irrelevant and not appropriate for the data, and information
that is being saved in the database of the system of HR. This will ensure DAS that one choice
have the capability to change and increase the particular needs of the organization. The

operational solutions and locations for HR manager and Contract manager can be discussed
as follows:
Student 1Student ID
Application tracking: In this approach manager capability of posting jobs for the
employees working in DAS, applications and boarding of the latest employers. Other
beneficial aspects of the administration, which has been very crucial for several HR
operations and the offers presented by HRMS software service providers or makers, which is
being offered in this case (Taylor, Fritsch & Liederbach, 2014). This may also benefits the DAS
in manner to increases concentration on the main objectives and goals of the DAS. This will
help the management to manage efficiently and smoothly all the operation that are being
operated in the DAS using SaaS and any other innovative technologies. As the part of the
broader HRMS location, capabilities of the organization could be shown by the help of the
dedicated tools which can be considered by the shift planning and schedule planning of the
employee.

2. Student 2 Student ID
Performance measurement: This is the simple record keeping of the employee’s
aims or tracking those aims. This also includes the motivation of the thoughts of the
employees towards the DAS’s goals and achievement and binds them to the success via
directly or automatically for the payroll and the compensation (Abowd, McKinney & Zhao,
2015). Considering other offshoots for the development of management operations of the
DAS, e-learning may be beneficial option.
3. Student 3 Student ID
Proper certifications: These are needed for particular jobs and works, online learning
will allow the managers to deliver proper and specific trainings to the employees of DAS for
achieving the desired goals of the organization.
Student 4 Student ID
ELearning authoring: Last but not the least eLearning authoring, can be considered
as the best option for the thought of personal training resources which can be evaluated
and originated by DAS to provide information and awareness to the learners (employees)
hub accessibility publicly.
Efficiency of the operational locations and solutions:
Both the operational locations and solutions can help in mitigating the threats and
risks that is recognized for the security and the privacy of the data and information of the
employee saved in the database. Following are the ways by which mitigation of threats can
be delivered in DAS:

First considerable objective is that operational solution and location which is being
offered by this new implication in DAS offers either canned integration or the open APIs. The
list of partner app has been introduced to the HRMS vendors, which helps in creating direct
integration ability by two options which were by making extra payment or by downloading
specific connectors (Rusinek & Rycx, 2013). The open APIs has been giving permission to the
users in order to creating individual integrations between the systems that is being used by
DAS until they support the API implication in the system of its management.

Solution Architecture including security and Privacy
Figure 1: “Solution Architecture including security and privacy”
(Source: Created by author)
Data Sensitivity
Student 1Student ID
Data sensitivity: Various issues are considerable regarding the data sensitivity and
the jurisdiction which can be related to the provided case study. Lots of factors have been
found crucial that can be relevantly considered in the designing policies and data sensitivity
policies. There are various regulations which are considerable for the designer in this case.
This will result in creating a unified approach by addressing them consistently (Feher, 2016).

Student 2 Student ID
Regulations: Examples can help in making this topic clearer, a number of jurisdictions
are implementing regulations related to the approaches on how and what data can be
managed. “EU Data Protection Directive” is complying different regulations in the US and
the issues after the compliance issues of the PCI. This was not stated as regulatory but was
affecting directly the requirements that were necessary for the data protection.
Student 3 Student ID
Data confidentiality: It can be considered that requirement for the different types of
information is not same, for several information and data confidentiality is much more
considerable and for few it is not. The availability of the data related to the business
continuity has been one of the most crucial for this case (Müller & Neumann, 2015).
Student 4 Student ID
The substituting and spoofing of the data: This being saved in the database can cause
disturbances in the system which could be the instances assuring data integrity which leads
to the crucial need of data integration. It will be important for DAS to not conflate
confidentiality of the organization or the employee with the protection of data only.
The quality of forum interaction
The team member The issues selected for risk
assessment
Reason behind the risk
analysis for the problems
selected
Member 1 Security beaches that has
been incorporated with the
There occurred the
exploitation of the less

theft of the tapes and discs
supporting the database.
powerful databases. This
generally takes about a
month to fix the issues. The
attackers are very much
knowledgeable regarding in
which way to rob the
unpatched databases or
databases having default
records and configuration
parameters.
Member 2 The usage risk This denotes that the risk is
incurred by DAS. The primary
concern in which they use
the specific application of
SaaS. Initially has been found
whether the organization is
using the application about
the functions of critical
business. Next it is identified
whether the app could have
stored the sensitive data.
Since the reply has been
negative in both the
situations, the application

must go to the lower risk
rank very fast.
Member 3 Risks regarding data
anonymity
There has been the necessity
to destroy the tracks or the
electronic trials on the data.
The electronic trail has been
the data that has been left
behind as anyone sends data
over any network. As DAS
has been requiring the
anonymization of data to use
for various causes. They
might find that to be largely
difficult.
This has been a kind of
information sanitization. The
intention here is to protect
the privacy and is meant to
encrypt or eradicate the
personally identifiable
information or PII from the
data sets. Thus this helps in
keeping the data describing

the people remain
Member 4 The brokerage of data DAS collects and sells the
consumer data. This data is
used to profile people
without must controls and
restrictions. Since the
previous few decades, the
data brokers have possessed
the field day for selling entire
information that could be
scooped by them from
anywhere they have finding
online. This practice is
increasing and unfettered
still the privacy laws
restricting the usage getting
enacted. There is no or very
minute accountability of the
guarantees that this
information is appropriate.

Conclusion:
At last it can be concluded by saying that the report has analysed the business,
privacy and the legal perquisites for the model to deploy clod at DAS. The study is also
useful to evaluate the necessities of risk management for this model. DAS has reached the
point of realization that they require a tsunami or SaaS applications to be managed. They
have identified that the cloud needs a unique requirements of security. These necessities
never map over easily from on-premise world of software. Numerous risks relevant to SaaS
are same to same as that of the faced by IT services in-house. This case occurs as the data
travels outside the corporate network’s control. The main objective has been to manage
these risks regarding SaaS, to be managed smoothly. This is to be done by appropriate
methods, policies, contracts and controls in place.

References:
Asghari, H., van Eeten, M. J., & Bauer, J. M. (2015). Economics of fighting botnets: Lessons
from a decade of mitigation. IEEE Security & Privacy, 13(5), 16-23.
Abowd, J. M., McKinney, K. L., & Zhao, N. (2015). Earnings Inequality Trends in the United
States: Nationally Representative Estimates from Longitudinally Linked Employer-
Employee Data. NBER Chapters.
Feher, K. (2016). Digital identity: The transparency of the self. In Applied Psychology:
Proceedings of the 2015 Asian Congress of Applied Psychology (ACAP 2015) (pp. 132-
143).
Felbermayr, G., Hauptmann, A., & Schmerer, H. J. (2014). International trade and collective
bargaining outcomes: Evidence from German employer–employee data. The
Scandinavian Journal of Economics, 116(3), 820-837.
Finkin, M. (2015). The Acquisition and Dissemination of Employee Data: the Law of the
European Union and the United States Compared. Studia z zakresu prawa pracy i
polityki społecznej, 2015.
Frankenberger, K., Weiblen, T., & Gassmann, O. (2013). Network configuration, customer
centricity, and performance of open business models: A solution provider
perspective. Industrial Marketing Management, 42(5), 671-682.
Gaddam, A., Aissi, S., & Kgil, T. (2014). U.S. Patent Application No. 14/303,461.
Gholami, A., & Laure, E. (2016). Security and privacy of sensitive data in cloud computing: a
survey of recent developments. arXiv preprint arXiv:1601.01498.

Heining, J., Klosterhuber, W., & Seth, S. (2014). An Overview on the Linked Employer-
Employee Data of the Institute for Employment Research (IAB). Schmollers
Jahrbuch, 134(1), 141-148.
Hudson, K. L., & Pollitz, K. (2017). Undermining Genetic Privacy? Employee Wellness
Programs and the Law. New England Journal of Medicine.
Kristal, T. (2017). Who Gets and Who Gives Employer-Provided Benefits? Evidence from
Matched Employer-Employee Data. Social Forces, 1-33.
Kristal, T. (2017). Who Gets and Who Gives Employer-Provided Benefits? Evidence from
Matched Employer-Employee Data. Social Forces, 1-33.
Lafuente, G. (2015). The big data security challenge. Network security, 2015(1), 12-14.
Lewis, L. (2013). Digital identity: are students' views regarding digital representation
of'self'gendered?.
Mann, M. I. (2012). Hacking the human: social engineering techniques and security
countermeasures. Gower Publishing, Ltd..
Müller, K. U., & Neumann, M. (2015). How reliable are incidence estimates based on cross-
sectional distributions? Evidence from simulations and linked employer-employee
data.
Pandey, S. C. (2016, October). An efficient security solution for cloud environment. In Signal
Processing, Communication, Power and Embedded System (SCOPES), 2016
International Conference on (pp. 950-959). IEEE.