INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK
The purpose of this research is to identify the influence of information security controls on the continuity of information system work. The fact that the companies operate in highly turbulent business environment with severe threats to information security, leads to the need to examine this issue...
Saved in:
Main Authors: | , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Faculty of Economics, University of Tuzla
2017-11-01
|
Series: | Economic Review |
Subjects: | |
Online Access: | http://er.ef.untz.ba/index.php/er/article/view/99 |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1823861256651538432 |
---|---|
author | Edin Osmanbegović Nedžad Pirić Mirza Suljić |
author_facet | Edin Osmanbegović Nedžad Pirić Mirza Suljić |
author_sort | Edin Osmanbegović |
collection | DOAJ |
description |
The purpose of this research is to identify the influence of information security controls on the continuity of information system work. The fact that the companies operate in highly turbulent business environment with severe threats to information security, leads to the need to examine this issue in detail. In their research, the authors have presented the indicators of impact of information security controls on the continuity of information system work. From the point of information security policy prescription, out of the total number of the surveyed companies, 80% do not have the required policy or a document showing the management commitment (attitude) to the introduction of information security measures. About 84% of the surveyed companies have information system access control. About 32% of these companies have the controls at the level of computer network, 22% of them have the control at the operating system level, while 38% have the control at the software application level. From the aspect of information system physical security, the surveyed companies (84%) indicated that they devote a considerable attention to this segment of information security. When analysing the existence of prescribed procedures for information system incident management, the study determined that only 20% of the companies have implemented these procedures. The prescribed procedures for monitoring information system continuity in the surveyed companies are at a very low level, as most of the companies (84%) do not have a proper procedure.
|
format | Article |
id | doaj-art-6786d4027d3c42c198c242878cff70fe |
institution | Kabale University |
issn | 1512-8962 2303-680X |
language | English |
publishDate | 2017-11-01 |
publisher | Faculty of Economics, University of Tuzla |
record_format | Article |
series | Economic Review |
spelling | doaj-art-6786d4027d3c42c198c242878cff70fe2025-02-10T00:31:07ZengFaculty of Economics, University of TuzlaEconomic Review1512-89622303-680X2017-11-01152INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORKEdin Osmanbegović0Nedžad Pirić1Mirza SuljićFaculty of Economics, University of Tuzla, Bosnia and HerzegovinaNeutrino d.o.o., Bosnia and Herzegovina The purpose of this research is to identify the influence of information security controls on the continuity of information system work. The fact that the companies operate in highly turbulent business environment with severe threats to information security, leads to the need to examine this issue in detail. In their research, the authors have presented the indicators of impact of information security controls on the continuity of information system work. From the point of information security policy prescription, out of the total number of the surveyed companies, 80% do not have the required policy or a document showing the management commitment (attitude) to the introduction of information security measures. About 84% of the surveyed companies have information system access control. About 32% of these companies have the controls at the level of computer network, 22% of them have the control at the operating system level, while 38% have the control at the software application level. From the aspect of information system physical security, the surveyed companies (84%) indicated that they devote a considerable attention to this segment of information security. When analysing the existence of prescribed procedures for information system incident management, the study determined that only 20% of the companies have implemented these procedures. The prescribed procedures for monitoring information system continuity in the surveyed companies are at a very low level, as most of the companies (84%) do not have a proper procedure. http://er.ef.untz.ba/index.php/er/article/view/99information securityaspects and procedures of information securityinformation system continuityprotection of companies’ information resources |
spellingShingle | Edin Osmanbegović Nedžad Pirić Mirza Suljić INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK Economic Review information security aspects and procedures of information security information system continuity protection of companies’ information resources |
title | INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK |
title_full | INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK |
title_fullStr | INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK |
title_full_unstemmed | INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK |
title_short | INFORMATION SECURITY CONTROLS AS DETERMINANT OF CONTINUITY OF INFORMATION SYSTEM WORK |
title_sort | information security controls as determinant of continuity of information system work |
topic | information security aspects and procedures of information security information system continuity protection of companies’ information resources |
url | http://er.ef.untz.ba/index.php/er/article/view/99 |
work_keys_str_mv | AT edinosmanbegovic informationsecuritycontrolsasdeterminantofcontinuityofinformationsystemwork AT nedzadpiric informationsecuritycontrolsasdeterminantofcontinuityofinformationsystemwork AT mirzasuljic informationsecuritycontrolsasdeterminantofcontinuityofinformationsystemwork |