The advent of Information Technology has enhanced the various threats and risks in the business organizations. Since most of the business, organization uses the Information technologies largely; hence, the threat is also large in dimension.
Examining the process of risk assessment
Risks are an integral part of any business organization. With the advancements in the Information Technology, the risks in the communication systems and the use of Internet have increased. Organizational risks might be of various types. These include the financial risk, safety risks, security risks as well as breach of privacy risks. One of the greatest risks that the business organizations face in the present day is the breach of privacy risks (Eichensehr, 2014). Since the use of Information Technology is being increasing widely, hence the security risks have been increasing (Tsagourias, 2016). It is important that effective risk assessment be done in order to mitigate the probable risks or curb down the security risks to a considerable extent.
The risk assessment and management process consists of the following components. These are, framing the risk, assessing the risk, responding to the risk once it is determined, monitoring the risk (Eichensehr, 2014). The risk assessment processes have to be monitored from time to time, such that the risk management process could be assessed from time to time and enhanced as and when required.
Assessing the need for a top-down approach for security
The traditional approach of ensuring security in the business organizations is the bottom-up approach. However, this process is not much successful. In this approach, the security issues are taken care by the lower level administrators who attempt to mitigate the various risks (Tsagourias, 2016). However, in the bottom-up approach, the participation of the policy makers are low, hence this approach is not effective (Lipschultz, 2017). In contrast to the bottom-up approach, the top down approach is much stronger and effective. The top-level management and the policy makers initiate this process. Thus, the implementation process is much faster as well as effective. The policy makers and the top level management allocates budget for the mitigation of the risks and the risk assessments, thus enhancing the risk assessment process.
Issue of IT regulation noncompliance and its impact
One of the IT regulations includes the maintaining of accessibility protection in order to ensure privacy. This refers to the policy that each employee in an organization should have a specific accessibility restriction such that all employees do have access to all information of the organization (Lipschultz, 2017). However, if the business organizations do not have such strict accessibility restrictions of the employees, then the IT regulations is breached. This might prove to be detrimental for the business organization (Ohlin, Govern & Finkelstein, 2015). This is because; the privacy of the confidential information of the organization will be misused and leaked out, if no restriction in the accessibility were given to the employees. Moreover, the free access of the confidential information of the business organization might result in a threat to the organization. thus, it is essential that to abide by the IT regulations.
References:
Eichensehr, K. E. (2014). The cyber-law of nations. Geo. LJ, 103, 317.
Lipschultz, J. H. (2017). Social media communication: Concepts, practices, data, law and ethics. Taylor & Francis.
Ohlin, J. D., Govern, K., & Finkelstein, C. (2015). Cyber war: law and ethics for virtual conflicts. OUP Oxford.
Tsagourias, N. (2016). Cyberwar: Law and Ethics for Virtual Conflicts.
