Disclosure of organizational information by employees on facebook: Looking at the potential for information security risks

ACIS 2011 Proceedings - 22nd Australasian Conference on Information Systems

Volumn , Issue , 2011, Pages

  Abdul Molok, Nurul Nuha ^a   Ahmad, Atif ^b   Chang, Shanton ^b  

^a INTERNATIONAL ISLAMIC UNIVERSITY MALAYSIA   (Malaysia)

^b UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

Information disclosure; Information security; Online social networking; Social media

Indexed keywords

ACADEMIC LITERATURE; FACEBOOK; INFORMATION DISCLOSURE; INFORMATION SECURITY THREATS; ORGANIZATIONAL INFORMATION; SOCIAL MEDIA; WORK-RELATED;

INFORMATION SYSTEMS; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS;

SOCIAL NETWORKING (ONLINE);

EID: 84869109416     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (36)

1. Abdul Molok, N.N., Ahmad, A., and Chang, S. 2010a. "Understanding the Factors of Information Leakage through Online Social Networking to Safeguard Organizational Information", 21st Australasian Conference on Information Systems (ACIS2010), Brisbane, Australia: Association of Information Systems.
2. Abdul Molok, N.N., Chang, S., and Ahmad, A. 2010b. "Information Leakage through Online Social Networking: Opening the Doorway for Advanced Persistence Threats", 8th Australian Information Security Management Conference, D.C. Bolan (ed.), Perth, Western Australia: Security Research Centre, Edith Cowan University.
3. Anand, V., and Rosen, C.C. 2008. "The Ethics of Organizational Secrets", Journal of Management Inquiry (17:2), pp 97-101.
4. Athanasopoulos, E., Makridakis, A., Antonatos, S., Ioannidis, S., Anagnostakis, K., and Markatos, E. 2008. "Antisocial Networks: Turning a Social Network into a Botnet", 11th Information Security Conference (ISC 2008), Taipei, Taiwan.
5. BBC. 2010. "Israeli Military 'Unfriends' Soldier after Facebook Leak. " Retrieved 9 March 2010, from http://news.bbc.co.uk/2/hi/middle_east/8549099.stm
6. Bulgurcu, B., Cavusoglu, H., and Benbasat, I. 2010. "Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness", MIS Quarterly (34:3), pp 523-548.
7. Colwill, C. 2010. "Human Factors in Information Security: The Insider Threat-Who Can You Trust These Days?", Information Security Technical Report (in press).
8. DiMicco, J., Millen, D.R., Geyer, W., Dugan, C., Brownholtz, B., and Muller, M. 2008. "Motivations for Social Networking at Work", Computer Supported Cooperative Work (CSCW'08), San Diego, California: ACM.
9. Everett, C. 2010. "Social Media: Opportunity or Risk?", in: Computer Fraud & Security. pp. 8-10.
10. Forrester. 2010. "The Value of Corporate Secrets", Forrester Research, Inc., Cambridge, Massachusetts.
11. Gaudin, S. 2009. "Execs Worry That Facebook, Twitter Use Could Lead to Data Leaks. " ComputerWorld Retrieved 2 June 2010, from http://www.computerworld.com/s/article/9136465/Execs_worry_that_Facebook_Twitter_use_could_lead_to_data_leaks
12. Gross, R., and Acquisti, A. 2005. "Information Revelation and Privacy in Online Social Networks (the Facebook Case)", ACM Workshop on Privacy in the Electronic Society (WPES), 2005, Virginia, USA: ACM.
13. Hamid, S., Waycott, J., Kurnia, S., and Chang, S. 2010. "The Use of Online Social Networking for Higher Education from an Activity Theory Perspective", 14th Pacific Asia Conference on Information Systems (PACIS 2010), Taipei, Taiwan: Association of Information Systems.
14. Hinson, G. 2010. "Industrial Espionage", in: NoticeBored Newsletter. Hastings, New Zealand: IsecT Ltd., pp. 1-7.
15. ISF. 2007. "Information Leakage. " Information Security Forum Briefing No.4 Retrieved 19 November 2009, from www.securityforum.org
16. Jagatic, T., Johnson, N., Jakobsson, M., and Menczer, F. 2007. "Social Phishing", Communications of the ACM (20:10), pp 94-100.
17. Kluemper, D.H., and Rosen, P.A. 2009. "Future Employment Selection Methods: Evaluating Social Networking Web Sites", Journal of Managerial Psychology (24:6), pp 567-580.
18. Lee, T.W., Mitchell, T.R., and Sablynski, C.J. 1999. "Qualitative Research in Organizational and Vocational Psychology, 1979-1999", Journal of Vocational Behavior (55), pp 161-187.
19. Leitch, S., and Warren, M. 2009. "Security Issues Challenging Facebook", 7th Australian Information Security Management Conference, C. Bolan (ed.), Perth, Western Australia: Edith Cowan University, pp. 137-142.
20. Mansfield, R. 2010. "Uk Mod Secrets Leaked onto the Internet. " Retrieved January 25, 2010, from http://news.sky.com/skynews/Home/UK-News/Ministry-of-Defence-Staff-Have-Leaked-Secret-Information-16-Times-Onto-Social-Networking-Sites/Article/201001415535304
21. McKenna, B. 2009. "Awareness Training 2.0", in: InfoSecurity. pp. 18-21.
22. McKinney, E.H., and Yoos, C.J. 2010. "Information About Information: A Taxonomy of Views", MIS Quarterly (34:2), pp 329-344.
23. Ng, V. 2009. "Us Congressman Twitters Secret Trip to Iraq", in: Search Security Asia.
24. Nosko, A., Wood, E., and Molema, S. 2010. "All About Me: Disclosure in Online Social Networking Profiles: The Case of Facebook", Computers in Human Behavior (26), pp 406-418.
25. Paul, I. 2010. "The Facebook Data Torrent Debacle: Q&A", in: PCWorld. San Fransisco: PCWorld Communciations.
26. Schneier, B. 2009. "Special Report: Industry Experts Debate Social Networking Risks", in: Security Asia.
27. Shaari, I., Chang, S., and Shanks, G. 2008. "Virtual Teams: Information Types for Effective Functioning", in: 12th Pacific Asia Conference on Information Systems (PACIS). Suzhou, People's Republic of China: AIS.
28. Smith, A.M., and Toppel, N.Y. 2009. "Case Study: Using Security Awareness to Combat the Advanced Persistent Threat", 13th Colloquium for Information Systems Security Education (CISSE), University of Alaska, Fairbanks, Seattle: CISSE, pp. 64-70.
29. Sophos. 2010. "Security Threat Report: 2010", Sophos Group, Boston, Massachusetts.
30. Steel, E., and Fowler, G. 2010. "Facebook in Privacy Breach: Top-Ranked Applications Transmit Personal Ids, a Journal Investigation Finds", in: The Wall Street Journal. New York, USA: Dow Jones & Company, Inc.
31. Symantec. 2011. "Internet Security Threat Report Trends for 2010", Symantec Corporation, California, USA.
32. Tikkanen, H., Hietanen, J., Henttonen, T., and Rokka, J. 2009. "Exploring Virtual Worlds: Success Factors in Virtual World Marketing", Management Decision (47:8), pp 1357-1381.
33. Whitman, M.E., and Mattord, H.J. 2008. Principles of Information Security. Stamford, Connecticut: Course Technology.
34. Wilson, J. 2009. "Social Networking: The Business Case", in: Engineering & Technology. Institution of Engineering & Technology, pp. 54-56.
35. Workman, M., and Gathegi, J. 2007. "Punishment and Ethics Deterrents: A Study of Insider Security Contravention", Journal of the American Society for Information Science and Technology (58:2), pp 212-222.
36. Young, K. 2010. "Policies and Procedures to Manage Employee Internet Abuse", Computers in Human Behavior (26), pp 1467-1471.