This dissertation examines the risk-based approach to privacy and data protection and the role of information sensitivity within risk management. Determining what information carries the greatest risk is a multi-layered challenge that involves balancing the rights and interests of multiple actors, including data controllers, data processors, and…

An elusive and problematic theme of risk management has been managers' ability to effectively measure information technology (IT) risk in terms of degree of impact and probability of occurrence. The background of this problem delves deep into the rational understanding of probability, expected value, economic behavior, and subjective judgment.…

An increasing number of firms rely on highly interconnected information networks. In such environments, defense against cyber attacks is complicated by residual risks caused by the interdependence of information security decisions of firms. IT security is affected not only by a firm's own management strategies but also by those of others. This…

The current study attempts to develop a preventive program to fend off the risks of using the internet by trying to test the effectiveness of raising students' awareness on various new technology-related issues. In order to achieve this goal, descriptive, analytical, and experimental approaches have been utilized. The program has been applied to a…

This dissertation problematizes the "state dossier system" (SDS): the production and accumulation of personal information on citizen subjects exceeding the reasonable bounds of risk management. SDS--comprising interconnecting subsystems of records and identification--damage individual autonomy and self-determination, impacting not only…