Technical Strategies Database Managers use to Protect Systems from Security Breaches

Technical Strategies Database Managers use to Protect Systems from Security Breaches by Leonard Ogbonna MS, Long Island University, 2004 MA, Fordham University, 1999 BD, Bigard Memorial Seminary, 1993 Doctoral Study Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Information Technology Walden University March 2020 Abstract Healthcare organizations generate massive amounts of data through their databases that may be vulnerable to data breaches due to extensive user privileges, unpatched databases, standardized query language injections, weak passwords/usernames, and system weaknesses. The purpose of this qualitative multiple case study was to explore technical strategies database managers in Southeast/North Texas used to protect database systems from data breaches. The target population consisted of database managers from 2 healthcare organizations in this region. The integrated system theory of information security management was the conceptual framework. The data collection process included semistructured interviews with 9 database managers, including a review of 14 organizational documents. Data were put into NVivo 12 software for thematic coding. Coding from interviews and member checking was triangulated with corporate documents to produce 5 significant themes and 1 subtheme: focus on verifying the identity of users, develop and enforce security policies, implement efficient encryption, monitor threats posed by insiders, focus on safeguards against external threats, and a subtheme derived from vulnerabilities caused by weak passwords. The findings from the study showed that the implementation of security strategies improved organizations’ abilities to protect data from security incidents. Thus, the results may be applied to create social change, decreasing the theft of confidential data, and providing knowledge as a resource to accelerate the adoption of technical approaches to protect database systemsHealthcare organizations generate massive amounts of data through their databases that may be vulnerable to data breaches due to extensive user privileges, unpatched databases, standardized query language injections, weak passwords/usernames, and system weaknesses. The purpose of this qualitative multiple case study was to explore technical strategies database managers in Southeast/North Texas used to protect database systems from data breaches. The target population consisted of database managers from 2 healthcare organizations in this region. The integrated system theory of information security management was the conceptual framework. The data collection process included semistructured interviews with 9 database managers, including a review of 14 organizational documents. Data were put into NVivo 12 software for thematic coding. Coding from interviews and member checking was triangulated with corporate documents to produce 5 significant themes and 1 subtheme: focus on verifying the identity of users, develop and enforce security policies, implement efficient encryption, monitor threats posed by insiders, focus on safeguards against external threats, and a subtheme derived from vulnerabilities caused by weak passwords. The findings from the study showed that the implementation of security strategies improved organizations’ abilities to protect data from security incidents. Thus, the results may be applied to create social change, decreasing the theft of confidential data, and providing knowledge as a resource to accelerate the adoption of technical approaches to protect database systems rom security incidents. Technical Strategies Database Managers use to Protect Systems from Security Breaches by Leonard Ogbonna MS, Long Island University, 2004 MA, Fordham University, 1999 BD, Bigard Memorial Seminary, 1993 Doctoral Study Submitted in Partial Fulfillment of the Requirements for the Degree of Doctor of Information Technology Walden University March 2020 Dedication I dedicate this work to my late parents, Maria and Modestus Ogbonna. Though you have passed from this life, your memories are alive. I will always treasure your ineffable faith and dedication. I hold these sterling qualities and genteel mannerisms close to my heart. Acknowledgments First all, I am thankful to God for the gift of life and health. I dedicate the successful completion of this study to my entire doctoral committee. To my exceptional mentor and doctoral chair, Dr. Steven Case, for spending several hours of your time, encouraging, advising, and guiding me through the doctoral study, I owe you my enduring gratitude. Without your meticulous feedback, I wouldn’t have completed the program. To my second committee member Dr. Gail Miles, I am grateful for your guidance through the process for your suggestions, thoughts, and feedback as the study developed. To my URR, Dr. Gary Griffith, I am grateful for your support throughout the process. I appreciate your feedback and recommendations. To the rest of the DIT staff and Walden University, I am thankful. Lastly, I am so grateful to my whole family, to my stepmother Lady (Mrs.) Eunice, my elder brother Francis, and the rest of my family for your encouragement and inspiration during the preparation of this dissertation. To all my friends, I am indeed thankful for your support.