Organizational information security threats: Status and challenges

Bernard Oloo Akello *

Jaramogi Oginga Odinga University of Science and Technology, Kisumu, Kenya.
 
Review
World Journal of Advanced Engineering Technology and Sciences, 2024, 11(01), 148–162.
Article DOI: 10.30574/wjaets.2024.11.1.0152
Publication history: 
Received on 19 May 2023; revised on 04 February 2024; accepted on 07 February 2024
 
Abstract: 
Organizational information security is a critical concern in today’s interconnected and data-driven world. With the increasing frequency and sophistication of cyber threats, organizations face significant risks to the confidentiality, integrity, and availability of their sensitive information. This paper provides an overview of the key aspects and challenges related to organizational information security. It highlights the importance of implementing robust security measures, such as firewalls, intrusion detection systems, encryption technologies, and secure coding practices, to protect against external threats. It also demonstrates the need for continuous monitoring, threat intelligence sharing, and incident response capabilities to detect and respond to security incidents effectively. This survey shows importance of user awareness, training, and adherence to security policies and procedures. In addition, the significance of establishing a security-centric culture within organizations to mitigate the risk of insider threats and promote a strong security posture is discussed. The evolving threat landscape, including challenges associated with advanced persistent threats, zero-day vulnerabilities, and the security of emerging technologies such as IoT and AI are highlighted, together with the need for ongoing research and innovation to address these challenges and enhance the effectiveness of preventive measures.
 
Keywords: 
Attacks; Threats; Privacy; Organizations; Information security
 
Full text article in PDF: