<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>This article presents the structure and analysis of information security incidents in a production company in 2015-2017. The purpose of the analysis is to identify incidental events and their frequencies. The analysis includes the occurrence of notifications, threatening events, employee errors and false alarms. The conducted research includes also the procedure for handling the incident in the enterprise. The enterprises very often avoid informing their contractors about the occurrence of incidents. Thanks to the analysis of incidents and a clearly defined action plan, the examined enterprise tested the incidents and actions taken with them as a method of creating the added value of the enterprise during the period under consideration. The conducted research has shown that contractors who are aware of preventive actions taken, as well as those affecting information security even after the occurrence of an incident, are more willing to provide trust and even support to the surveyed enterprise. The conducted analysis is a pilot study carried out in one large enterprise in the metallurgical industry. The aim of the conducted research is to show that the incident or negative event may have a positive impact on the company's image. The research was carried out with the use of a questionnaire and in-depth interview with representatives of enterprises that are co-operators of the examined company.</p>
</abstract>

This article presents the structure and analysis of information security incidents in a production company in 2015-2017. The purpose of the analysis is to identify incidental events and their frequencies. The analysis includes the occurrence of notifications, threatening events, employee errors and false alarms. The conducted research includes also the procedure for handling the incident in the enterprise. The enterprises very often avoid informing their contractors about the occurrence of incidents. Thanks to the analysis of incidents and a clearly defined action plan, the examined enterprise tested the incidents and actions taken with them as a method of creating the added value of the enterprise during the period under consideration. The conducted research has shown that contractors who are aware of preventive actions taken, as well as those affecting information security even after the occurrence of an incident, are more willing to provide trust and even support to the surveyed enterprise. The conducted analysis is a pilot study carried out in one large enterprise in the metallurgical industry. The aim of the conducted research is to show that the incident or negative event may have a positive impact on the company's image. The research was carried out with the use of a questionnaire and in-depth interview with representatives of enterprises that are co-operators of the examined company.

Creating Value Added for an Enterprise by Managing Information Security Incidents

System Safety: Human - Technical Facility - Environment

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

This article presents the structure and analysis of information security incidents in a production company in 2015-2017. The purpose of the analysis is to...

Creating Value Added for an Enterprise by Managing Information Security Incidents

Published Online: Mar 28, 2019

Page range: 156 - 162

Received: Dec 02, 2018

Accepted: Jan 25, 2019

DOI: https://doi.org/10.2478/czoto-2019-0020

Keywords
incident service, management of information security incidents, creation of value through information security

© 2019 Żywiołek Justyna et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Creating Value Added for an Enterprise by Managing Information Security Incidents

Published Online: Mar 28, 2019

Page range: 156 - 162

Received: Dec 02, 2018

Accepted: Jan 25, 2019

DOI: https://doi.org/10.2478/czoto-2019-0020

Keywordsincident service, management of information security incidents, creation of value through information security

© 2019 Żywiołek Justyna et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Keywords
incident service, management of information security incidents, creation of value through information security