PAC-5010: Privacy Law and Data Protection

Sharevski, F., & Jachim, P. (2022). “Alexa, What’s a Phishing Email?”: Training users to spot phishing emails using a voice assistant. EURASIP Journal on Information Security, 2022(1), 1–13. https://doi.org/10.1186/s13635-022-00133-w

This paper presents the results of an empirical study that investigated the effectiveness of using Amazon Alexa as an intelligent voice assistant to deliver a phishing training to users. The study focused on an interaction-based phishing training approach that used principles of persuasion to help users identify phishing emails, and the results indicated that this approach was significantly more effective than other methods tested. As a student in a privacy law and data protection class, this paper provides insights into innovative methods of phishing training that can improve data protection efforts.

Lasky, J. (2021). Confidentiality, integrity, and availability (CIA triad). Salem Press Encyclopedia. Retrieved from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=ers&AN=152331694&site=eds-live&scope=site&custid=s1229530

As a student in a privacy law and data protection class, it is essential to understand the CIA triad, a widely used model for developing cybersecurity policies in various organizations. The CIA triad focuses on confidentiality, integrity, and availability to ensure that information technology (IT) security is comprehensive and effective in addressing potential threats to an organization's critical information.

Goddart, 2020. Cyber Security Statistics 2020. IT Chronicles https://itchronicles.com/information-security/cyber-security-statistics-2020/

This article provides an overview of cybersecurity statistics for 2020, highlighting the latest trends and insights on cyber threats, attacks, and vulnerabilities. As a student in a privacy law and data protection class, understanding current cybersecurity statistics is crucial for developing effective data protection strategies and policies.

Lundgren, B., & Möller, N. (2019). Defining information security. Science and Engineering Ethics, 25(2), 419–441. https://doi.org/10.1007/s11948-017-9992-1

As a student in a privacy law and data protection class, it is important to understand the concept of information security and how it is defined. This article proposes a new definition of information security, the 'Appropriate Access' definition, which bridges the conceptual divide between technical and soft issues of information security, making it suitable for various analytical purposes and addressing some of the problems associated with the standard CIA definition.

Bongiovanni, I. (2022). Information security management in distress at SkillPlat. Journal of Information Systems Education, 33(4), 338–356. Retrieve from https://search.ebscohost.com/login.aspx?direct=true&AuthType=sso&db=bth&AN=160195132&site=eds-live&scope=site&custid=s1229530

As a student in a privacy law and data protection class, it is important to understand how information security is assessed and managed in real-world situations. This role-playing teaching case, which involves impersonating a consulting company tasked with assessing the information security practices of a provider of apprenticeship and traineeship services, provides an opportunity for students to apply their knowledge and skills in assessing and improving information security management practices.

Norton, Q, (2018). Phishing is the internet’s most successful con. The Atlantic. https://www.theatlantic.com/technology/archive/2018/09/phishing-is-the-internets-most-successful-con/569920/

As a student in a privacy law and data protection class, it is important to understand the prevalence and impact of phishing attacks on individuals and organizations. This article explores the tactics used by phishers to trick users into revealing sensitive information, and discusses the devastating consequences of successful phishing attacks.

Alkhalil, Z., Hewage, C., Nawaf, L., & Khan, I. (2021). Phishing Attacks: A Recent Comprehensive Study and a New Anatomy. Frontiers in Computer Science, 3. https://doi.org/10.3389/fcomp.2021.563060

This article provides a comprehensive evaluation of phishing attacks, which are a prevalent form of cybercrime that targets personal and financial information shared online. The article proposes a new detailed anatomy of phishing that covers the attack phases, attacker types, vulnerabilities, threats, targets, attack mediums, and attacking techniques to increase readers' awareness of the techniques being used and assist in developing effective countermeasures.

Lugnet, J., & Ericson, Å. (2022). Scenarios as a Tool for Professional Training in Information Security Dialogues. International Journal of Technology, Knowledge & Society: Annual Review, 18(2), 65–77.

This article examines the development of information security awareness among IT service designers through the use of scenarios that encourage abstract and reflective thinking. The study highlights the need for training that integrates organizational, business, and social aspects into traditional security contents and suggests that scenarios should be framed as dilemmas based on real-world business activities, promoting multiple solutions and structured in-depth dialogues among employees.