Cyber Security Case Study

This is a case study of how policies, laws and regulations affect the cybersecurity field in organizations. Laws and regulations have been used in multiple various fields to provide guidance and control over how certain practices are been done. Their introduction to the Information Security field is recent, and due to the importance of what’s at stake, they seem to play a necessary role. It’s vital that we explain in details what has been observed in organizations’ programs and normal operations as a result of implementing these rules. In the past, not having any kind of direction while creating Information Security programs have proved to isolate agencies away from current progress in cybersecurity, while creating confusion on how to face

Not a long ago, technological innovation was making its baby steps into our lifestyle. There was never a major talk on cybersecurity, even though the idea was present. Progress in technology have brought new ideas and innovations that have attracted, in turn, malicious and criminal practices; with this fast paced world we live in, we cannot afford to put our plans and goals on hold in order to deal with the problem. Today, it’s fair to say that we are all trying to catch up with the pace of technological advancement, and that is a difficult thing to accomplish, due to how fast and how complex the field has grown to be. It’s the same story in the case of cybersecurity, where we seem to be forced to react, rather act. At some point, it seemed like the cyberwar was left to the IT industries organizations to handle, until many more companies have been attracted to the technology world, due to various reasons, including competition and their respective market growth, an observation confirmed by Judith H. Germano (2014): “With time and experience (and even more alarming news report), more companies are becoming aware of, and realizing they need to address, cybersecurity concerns on a proactive basis” (p. 7). Nowadays, the society is more connected than ever, making it a target for criminals more than ever, and it requires a collective effort to achieve Information Security

Multiple threats and attacks on and agencies have pushed all types of companies to raise the bar on security, thanks to laws that took effect. The reality is that “substantial numbers of corporate leaders lack confidence in their organizations’ level of preparedness – in part the result of a shortfall of cybersecurity literacy within organizations” (New Study Provides Cybersecurity Insight for Corporate Counsel, 2015). Some of these laws specifically target certain areas, like the Cybersecurity Information Sharing Act in 2015. Information sharing between companies have shown a significant increase in cybersecurity preparedness. Not only did these companies report that they were able to defend themselves against new attacks that are similar to previous ones, but also get more knowledge in how to lawfully and properly handle certain cybersecurity