1 School of Data Intelligence and Technology, Robert Morris University, Pittsburgh, Pennsylvania, United States.
2 Department of Information Systems, East Tennessee State University, Johnson City, Tennessee, United States.
3 Department of Computer Science, Wrexham University, Wreaxham, Wales, United Kingdom.
4 Department of Analytics, Kogod School of Business, American University, Washington DC, District of Columbia, United States
Review Article
World Journal of Advanced Research and Reviews, 2023, 20(03), 2122-2144
Received on 18 November 2023; revised on 26 December 2023; accepted on 28 December 2023
Introduction: Cyber threats are constantly increasing in severity and targeting organizations in all industries, and result in loss of valuable data and a decline in stakeholders’ confidence. Advanced information systems positively impact overall organizational operations and functionality but bring new opportunities that adversaries seek. This research article seeks to look at how organizations can enhance data protection and prevent breaches in modern technology landscapes.
Materials and Methods: An initial search and screener was done on selected journal article from the year 2015-2024 that was peer reviewed, industry report, and case study. The conceptual framework combined the theoretical approach to data breaches, malware attacks, and cybercriminal motives with factors, such as users’ perceptions, legal requirements. Data from 22 original papers were subject to a qualitative content analysis approach, and thematic synthesis was used to determine common patterns in security practices, threats, and risk management mechanisms.
Results: The analysis revealed several key themes: 1) The major importance of security awareness training as the key to strengthening the human factor which is the weakest link in the context of data protection. 2) The validity of the layer defense principle that entailed a combination of technical measures and sound policies and procedures. 3) The role of encryption, access controls, and data minimization to protect information and data that is more important today than ever before. 4) Threat Intelligence and incident response planning to detect the breaches in advance before the threat actors begin executing the attack. 5) The role of AI and machine learning as threats and as the possibility to identify and prevent threats while using their opportunities for data analysis in cybersecurity.
Discussion: The results imply that the protection of information should be an organizational, risk management approach with current and future threats in mind. However, while technical measures must be adopted, so too must the emphasis be placed on promotion of a security-aware culture as well as the adherence to regulatory requirements. The research indicates areas for future development, with specific emphasis on the issues of insider threats and protection of information in cloud and IoT contexts. Drawbacks include the fact that technological advancements are rather fast, which makes it difficult for academic publications to keep up with them. Additionally, there could be situations when certain industries fail to report breaches.
Conclusion: Preventing data breaches in today’s information systems, therefore, cannot be addressed through a single solution that involves merely the application of people, processes or technology, but rather through a holistic approach oriented towards the integration of the three aspects. Organizations need to be creative about the issue and adopt emerging technologies that address existing and fundamental security risks. Further research should focus on the effects of AI-based threats calculate the return of security investments, and establish guidelines for data protection specific to industries.
Data breaches; Information systems; Data security; Threat landscape; Internet of Things; Attack vectors
Preview Article PDF
Chukwudi Tabitha Aghaunor, Patience Eshua, Tawo Obah and Oluwatoyin Aromokeye. Data security strategies to avoid data breaches in modern information systems. World Journal of Advanced Research and Reviews, 2023, 20(3), 2122-2144. Article DOI: https://doi.org/10.30574/wjarr.2023.20.3.2515