IT Privacy and security

## What is IT privacy and security?

**IT privacy and security**, also referred to as information security, is defined as the "protection of information to ensure confidentiality, integrity, and availability." Privacy is considered a controversial subject when discussed in a technological context. Consumers tend to place a lot of emphasis on their desire to keep their information safe on cyberspace.

IT specialists claim that there is no longer any meaning to the word *privacy*; all internet user information is constantly on display despite different efforts, and feel that is a fact that must just be accepted. Every human-computer interaction tends to carry a degree of risk no matter what specialists try to implement to counteract cyber attacks and security leaks.

Whatever one's stance on the subject may be, it is still important to acknowledge that whether or not user information is truly private and secure, consumers still want to feel that theirs is. Technology advances only seek to help feed into the feeling of security that many consider a necessity. Although privacy issues are considered more of a "human" issue than one that can be directly solved in the IT industry, technological tools can help manage, establish, and enforce privacy policies and legislation more effectively.

## Implementing Privacy and Security Standards into IT Mechanisms

Many technological experts, such as Ann Cavoukian, argue that privacy practices should be woven into IT infrastructures from the get-go. This concept is known as privacy by design. Security breaches tend to be relatively costly for the businesses affected. One study found that the average cost of having confidential records containing customer information is approximately $145 per record. Considering the fact that over 174 million records were stolen in 2011 alone, it is clear to see how these costs can quickly add up and hit a company's finances significantly.

This does not even begin to include the cost of losing loyal customers and partners due to a lack of confidence after a breach. Privacy by design technologies are helpful in saving time and energy wasted down the line dealing with possible information security breaches. However, they also increase overall customer satisfaction, reduces legal liabilities, and increases a company's competitive advantage.

It is very easy to see how information technology has become a stronghold of privacy and security in the 21st century. Security issues not only impact people on an individual level, but also on a corporate level as well. Hackers will only continue to get wiser and their schemes more sinister. However, with the help of IT specialists, technology can help combat the onslaught of increasing cyber attacks predicted to occur in the future. Experts are constantly observing where improvements can be made in their information systems to strengthen their security systems.

 It is arguable that the emergence of new information technologies has actually helped scammers in some senses, i.e. giving them more tools to take advantage of unsuspecting victims. But the benefits will always outweight the conceived downfalls. As Lin Grensing-Pophal aptly put in *Security and Identity*, "the goal [of maintaining information security] should be finding a reasonable balance between security and access to [...] content for those who have the appropriate authorization to access that content."

## References

1. ↑ Information Security. (April 2016). in PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms (v3.2). PCI Security Standards Council, LLC.
2. ↑ 2.0 2.1 van den Hoven, J., Blaauw, M., Pieters, W., & Warnier, M. (Spring 2016). *Privacy and Information Technology*. *Plato.stanford.edu*. Retrieved 15 April 2017, from https://plato.stanford.edu/entries/it-privacy/#Bib
3. ↑ 3.0 3.1 Karat, C., Brodie, C., & Karat, J. (2006). Usable Privacy and Security for Personal Information Management. *Communications Of The ACM*, *49*(1), 56-57. doi:10.1145/1107458.1107491
4. ↑ 4.0 4.1 Cavoukian, A. (2011). *Privacy by Design* (2nd ed., pp. 1-2). Ontario, Canada: Information and Privacy Commissioner of Ontario. Retrieved from https://web.archive.org/web/20160330122525/https://www.ipc.on.ca/images/resources/privacybydesign.pdf
5. ↑ 5.0 5.1 Gable, J. (2014). PRINCIPLES FOR PROTECTING INFORMATION PRIVACY. *Information Management Journal*, *48*(5), 38-42.
6. ↑ 6.0 6.1 Grensing-Pophal, L. (2011). SECURITY and IDENTITY. *Econtent*, *34*(1), 22-26.
7. ↑ Radcliff, D. (2001). No Laughing Matter. *Computerworld*, *35*(11), 56.