Information and Cyber Security: 18th International Conference, ISSA 2019, Johannesburg, South Africa, August 15, 2019, Proceedings (Communications in Computer and Information Science, 1166)

Preface
Conference Focus
Organization
Contents
Information Security Cost Reduction Through Social Means
	Abstract
	1 Introduction
	2 Information Security Culture
		2.1 The Human Factor of Information Security Culture
	3 Information Security Cost
		3.1 What Determines Information Security Cost?
		3.2 Why Determine Information Security Cost?
	4 Motivation, Positive Reinforcement and Reward
		4.1 Extrinsic Reward
		4.2 Intrinsic Reward
	5 Information Security Remediation Factors
	6 Proposed Framework
	7 Future Work
	8 Conclusion
	References
A Management Decision Support System for Evaluating Information Security Behaviour
	Abstract
	1 Introduction
	2 Background
		2.1 Management Issues in Information Security
		2.2 Behavioural Issues in Information Security
			2.2.1 Information Security Behaviour
			2.2.2 Model for Measuring Information Security Behaviour
	3 Description of the System
	4 Critical Reflection
		4.1 Contributions of the System
		4.2 Limitations of the System
	5 Conclusion and Future Work
	Acknowledgements
	References
An Aviation Sector CSIRT for Sub-Saharan Africa
	Abstract
	1 Introduction
	2 Aviation ICT Systems
	3 Cyber-Attacks on Aviation ICT Systems
	4 Current and International Cyber Response Frameworks
		4.1 Globally Established CERTs
		4.2 European Aviation Security
		4.3 Established CSIRTs in Sub-Saharan Africa
	5 Incidence Response
	6 Sub-Saharan Aviation CSIRT – First Steps
	7 Conclusion
	References
PAUDIT: A Distributed Data Architecture for Fitness Data
	Abstract
	1 Introduction
	2 Research Methodology
	3 Background
	4 Overview of Architectural Model
	5 Auditing Module
		5.1 Audit Module Design
		5.2 Audit Module Implementation
		5.3 Audit Module Testing
	6 Conclusion
	References
Threats and Vulnerabilities Affecting Fitness Wearables: Security and Privacy Theoretical Analysis
	Abstract
	1 Introduction
	2 Methodology
		2.1 Systematic Literature Review (Phase 1)
		2.2 Qualitative Content Analysis (Phase 2)
		2.3 Theoretical Frameworks (Phase 2)
	3 Results and Presentation
	4 Vulnerability and Threat Analysis Findings
	5 Future Research
	6 Conclusion
	References
A Conceptual Model for Consent Management in South African e-Health Systems for Privacy Preservation
	1 Introduction
	2 Background
		2.1 South African Legislature on Privacy
		2.2 e-Consent
		2.3 Information Security Services
	3 Requirements for e-Consent Management in e-Health
	4 Conceptual Model for e-Consent Management in e-Health
	5 Architectural Design of an e-Consent Management System
		5.1 e-Consent Management System Components
		5.2 e-Consent Management System Processes
	6 Discussion
	7 Conclusion
	References
Federation of Services from Autonomous Domains with Heterogeneous Access Control Models
	1 Introduction
	2 Federation of Services
	3 A Method for Federated Access Control
		3.1 Access to Federated Services
		3.2 Composition of Federated Services
	4 Implementation of Our Method
	5 Application and Evaluation
		5.1 Case Study: Federation of Scholarship Services
		5.2 Federation of Domains and Services
		5.3 Evaluation
	6 Related Work
	7 Conclusion
	References
Security Aspects of an Empirical Study into the Impact of Digital Transformation via Unified Communication and Collaboration Technologies on the Productivity and Innovation of a Global Automotive Enterprise
	Abstract
	1 Introduction
	2 Enterprise Digital Transformation
		2.1 Motivators for Enterprise Digital Transformation
		2.2 Challenges to Digital Transformation
	3 Internet of Things
		3.1 Origins of the Internet of Things
		3.2 Evolution of IoT and Cognitive Internet
	4 Industry 4.0
		4.1 Challenges to Industry 4.0 Adoption
	5 Research Design and Methodology
	6 Empirical Research
		6.1 Case Study Structure and Timeline
		6.2 Architectural Framework for Enhanced UC&C (E-UC&C)
		6.3 Deployed Framework
	7 Results and Interpretation
		7.1 Impact on Productivity
		7.2 Impact on Innovation
		7.3 Impact via Digital Transformation Through UC&C Technologies
	8 Discussion and Conclusion
	References
A Descriptive Review and Classification of Organizational Information Security Awareness Research
	Abstract
	1 Introduction
	2 Background
		2.1 Measuring Information Security Awareness
		2.2 Information Security Awareness Antecedents
		2.3 Theoretical Perspectives
	3 Methodology
		3.1 Grounded Theory Literature-Review Method
		3.2 Sampling and Data Collection
		3.3 Analysis
	4 Classification and Descriptive Review
		4.1 Classification
		4.2 Descriptive Review
	5 Discussion
	6 Conclusion
	Acknowledgements
	References
Theorising Information Security Policy Violations
	Abstract
	1 Introduction
	2 Theoretical Landscape: Information Security Compliance/Non-compliance
		2.1 Deterrence Theory
		2.2 Rational Choice Theory
		2.3 Protection Motivation Theory
	3 Theoretical Gap
		3.1 Neutralisation Theory
		3.2 The General Theory of Crime (Self-control)
	4 Proposed Theoretical Model
	5 Conclusion
	References
An Institutional Trust Perspective of Cloud Adoption Among SMEs in South Africa
	Abstract
	1 Introduction
	2 Conceptual Foundations
	3 Method
	4 Findings
	5 Conclusion
	References
Data Privacy Compliance Benefits for Organisations – A Cyber-Physical Systems and Internet of Things Study
	Abstract
	1 Introduction
	2 Background
		2.1 Cyber-Physical Systems and Internet of Things
		2.2 Privacy and the Protection of Personal Data
	3 Research Methodology
	4 Privacy Compliance Benefits for Organisations Using or Developing CPS and IoT Technologies
		4.1 Legal Compliance
		4.2 Data Subject Trust and Confidence
		4.3 Data Subject Retention
		4.4 Public Trust
		4.5 Consumer Trust and Confidence
		4.6 Respect for Consumer Privacy
		4.7 Improved Service Provision
		4.8 Reducing Organisational Reputational Risk
		4.9 Improved Risk Management
		4.10 Data Privacy Risk Minimisation
		4.11 Reduction of Complaints and Disputes
		4.12 Public Perception of Transparent Practices
		4.13 Reduced Risk of Collateral Intrusion
		4.14 Regulated Data Sharing
		4.15 Better Data Security/Protection
		4.16 Encourage Adoption of CPSs and IoT
		4.17 Improved Trade Relations and Investment
		4.18 Organisational Management Efficiency
	5 Using the Benefits
	6 Conclusion
	References
Author Index