In the wake of UK intelligence services reportedly warning major British companies of Chinese sponsored spying, Computer Fraud & Security looks at the epidemic of electronic espionage. Although this study has yielded theoretical, methodological and practical contributions, there is, in reality, more research work to be done in this area.ĭr Andrew Jones, Head of Security Technology Research, BT Security Research Centre, Adjunct, Edith Cowan Universityĭr Andy Jones looks at how espionage has never been easier. It is on the basis of this premise that practitioners can, to some extent, construe that the integration of legislation into information security policies can be done in other South African organisations that did not participate in this study. The fact that the proposed Concept Model is technology-independent and that it can be implemented in a real corporate environment, regardless of the organisation’s governance and management structure, holds great promise for the future of information security in South Africa and abroad.įurthermore, this thesis has generated a topology for linking legislation to the provision of information security which can be used by any academic or practitioner who intends to implement information security measures in line with the provisions of the law. This Concept Model embodies the contribution of this study and demonstrates how legal requirements can be incorporated into information security endeavours. One of the most important outcomes of this study is the proposed Concept Model of Legal Compliance in the Corporate Environment.
The findings of this study indicate that most organisations in South Africa are not integrating legal aspects into their information security policies. Data gathering methods included individual interviews, website analysis, and document analysis. Forty-five South African organisations participated in this research. This is the premise upon which the study was undertaken. Although several authors have written about legal and policy aspects regarding information security in the South African context, it has not yet been explained how these aspects are used in the provision of information security in the South African corporate environment. In order to mitigate e-crime, the South African government promulgated laws that contain information security legal aspects that should be integrated into the establishment of information security.
However, one of the challenges in E-commerce is information security. This growth has presented both customers and merchants with many advantages. E-commerce is growing rapidly due to the massive usage of the Internet to conduct commercial transactions.
0 kommentar(er)
