Issues of the Culture of Information Security under the Conditions of the Digital Economy

Awareness of network security and customer value - The company and customer perspective

The COVID 19 pandemic, by forcing the need to establish and develop relationships via the network, has significantly accelerated the process of digital transformation. For most enterprises, this means the need to change their business model. The basis for each model is subjectively defined customer value. This value is both the input and output of the whole process of building sustainable and profitable relationships with customers. It is believed that in the environment dominated by modern technologies based on the use of the network potential, the value of these relationships reflected in the dually estimated customer value is linked to the awareness of the network potential and the ability to use it. On the basis of the analysis of the purchasing process in the e-commerce industry in Poland and the research, among others, carried out by banks and other scientific centers or institutions dealing with cybersecurity, it is demonstrated that the awareness of the network potential ought to be assessed not only through the prism of benefits that connect both parties with establishing and developing the relationship, but also threats arising from the need to use online mediated relationships. It is believed that the use of the potential of virtual space, in which the customer moves, is determined by the awareness of the network potential, the integral component of which is the awareness of security of establishing, maintaining, and developing relationships. This factor, being directly linked to the risk of the relationship, does and will have a significant impact on the process of creating customer relations in the future and thus the company's value.

Digital information security management policy in academic libraries: A systematic review (2010–2022)

Digital information security management (DISM) is considered an important tool to ensure the privacy and protection of data and resources in an electronic environment. The purpose of this research is to look into the applications of DISM policies in terms of practices and implementation in academic libraries. It also identifies the challenges faced by academic libraries in applying these DISM practices regarding policy. A systematic literature review was conducted to achieve the objectives of the study. The data were collected from well-known different databases, that is, Library Information Science and Technology Abstracts (LISTA), Library and Information Science Abstracts (LISA), IEEE Xplore, Emerald Insight, ACM Digital Library, Scopus, Sage journals, Taylor & Francis, ProQuest, Science Direct, Wiley Online Library, and Google Scholar. It followed the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) guidelines to choose relevant articles with keyword searching. Some academic libraries have developed DISM policies on data protection, data backup, information security (IS) systems, the development of hardware and software, the training of library staff, data protection from malware and social engineering, and data security and privacy. A few libraries have developed a mechanism to protect and secure users’ sensitive data from hackers, viruses, malware and social engineering. Findings indicated that both organisations and users trust libraries due to their strict privacy and data security policies. However, some academic libraries did not adopt and implement DISM policies in their organisations, even though they had written DISM policies. Libraries have been facing issues with the DISM policy on data security and privacy, data backup, IS systems, hardware and software upgrades and technical support of library staff. They also face budgetary challenges and a lack of readiness among librarians to adopt emerging tools and technology such as DISM. Library professionals faced challenges in developing and implementing the DISM policy. For data security and privacy, stakeholders, administrators and library professionals must promote the DISM policy culture in academics. This study is beneficial for library professionals, policymakers, administrators and management to make DISM policies and implement them in their organisation or libraries to secure sensitive, personal data and resources. This article is the first review of DISM policy in academic libraries of its kind and would be useful for information professionals, stakeholders and administrators.

Transformation of Strategic Models for Managing Human Risks of Information Security of an Enterprise as an Imperative of the Digital Industry

This article substantiates the imperatives of transforming the information security (IS) human risk management model at a digital industry enterprise using the theories of strategic management, psychological ownership (involvement), and cultural parameters of human activity. The types of strategies and strategic models of information security culture (ISC) have been substantiated. With the use of sociological research, the dominance in organizations of the ISC defensive strategy was revealed, the pattern of the transition from the defensive to the developing strategic ISC model was revealed, and then the transition to the integrative ISC management strategy, thus combining both strategic models. The concept of the draft Information security culture national standard, which can be the basis for the design and implementation of a standard of the same name for any enterprise, is presented.