Identifying and ranking the factors affecting the leakage of organizational information using the analytical hierarchy process

Authors
Abdulamir Mabhoot 1
Mohammad Reza Farhadpoor 2
Ebrahim Hoseini 3
1 Information Technology Management-Information Resource Management Departement, Ahvaz Branch, Islamic Azad University, Ahvaz
2 Information and Knowledge Science-Information Management Departement, Ahvaz Branch, Islamic Azad University, Ahvaz, Iran.
3 Information Science and Knowledge, Central Library of Urmia University, Urmia, Iran
Abstract
One of the most important current debates in organizational information security is information leakage. Information leakage, which refers to the unauthorized sharing of information by one organization with another, is one of the serious problems faced by organizations. Information leakage can cause losses to the company and affect its ability to gain a competitive advantage. Information leakage includes two types of leakage or intentional or unintentional disclosure of data or exclusive content to unauthorized persons. Intentional information leakage includes the intentional disclosure of information by employees to unauthorized persons. Deliberate information leakage is often caused by employee dissatisfaction with the company or a motive for personal gain. The main cause of intentional information leakage is revenge or unethical behavior of employees who are willing to betray their company or disclose sensitive information to competitors. In other words, if employees are not aware of how much information to disclose to outsiders, then unwanted/inadvertent information leakage may occur. These cases damage the reputation of the organization, its income and business. As a result, the pervasiveness of this uncertainty about information security in the work environment puts the organization's information assets at risk. In order to minimize or prevent information leakage, it is important to investigate and identify the factors that lead to this happening.

Regardless of the type of information leakage and the related motives, the impact of these actions in itself can lead to financial losses, disruption of the organization, loss of reputation and long-term impact on the organizational culture. Although the phenomenon of information leakage may happen in any organization; But considering the opportunities and values ​​that every organization loses as a result, its importance can be understood. For this reason, the consequences of information leakage will be different from one organization to another, and accordingly, its degree of importance will also be different. The study and identification of factors affecting the phenomenon of information leakage is interesting from several aspects. First, the airport environment with the presence of various airlines is an example of a highly competitive market where the actions and operations of the airport are exposed to the customers. The second point is that the customers of the airport system are heterogeneous and may be people of different nationalities. Third point, the issue of security in airport systems is a complex and interesting phenomenon that is provided by the participation of different organizations. The fourth point is that the flow of information in the airport system is intense, intra-organizational and trans-organizational/cross-border. The fifth point is that the occurrence of an error in the flow of information in airport systems can have unfortunate human, financial, and other consequences. Considering these points, the present study was conducted at Ahvaz International Airport. Preventing information leakage is one of the most important security issues at Ahvaz International Airport. Because with the loss of data, the reputation of the airport is damaged and it loses its customers, it has to pay a high cost to fix the damages, and this will sometimes lead to the destruction of the organization. According to the mentioned contents, this research seeks to answer the question, what are the factors affecting organizational information leakage in Ahvaz International Airport? How are they ranked? Hence, the purpose of this study was to identify and rank the factors affecting organizational information leakage in Ahvaz International Airport using the Hierarchical Analysis Process.



Methods

Since the ultimate goal of the current research was to improve the understanding of the problem of information leakage as an important concern for the organization and to find a practical solution to reduce it, it is practical research in terms of the goal. Also, from the point of view of nature, the current research is descriptive-exploratory; Because what follows the data follower approach to "describe" and "interpret" the factors affecting organizational information leakage as it is. The research community was all information security experts in different parts of Ahvaz Airport; that by the snowball method (because it was difficult to identify the experts and the possibility of contacting and accessing them) 15 experts in the information security field of Ahvaz Airport (having relevant work experience of more than 15 years, a master's degree or higher and familiar with security issue and information leakage). In this study, the library method was used to compile the theoretical foundations of the research, the background of the research and the design of the decision tree. Then, the field method was used to distribute the five-point paired comparison questionnaire to collect data. The first questionnaire was taken from the research literature and was distributed among 15 experts using the Delphi technique. Opinions were sought from the expert group of the Delphi study, in the form of sending a structured questionnaire with a 5-point Likert scale, consisting of 22 questions, in two rounds with the participation of 15 people, in such a way that first, the first questionnaire consisting of 22 questions was sent to the members of the Delphi group. After distributing and collecting completed questionnaires and evaluating the results of this Delphi round, 5 main factors and 21 important sub-factors were identified (laws and regulations sub-factor with an average of 2.87±83 and a t value of 0.61 was not recognized as significant and was excluded from the questionnaire for the second round) and after twenty days, from the initial opinion poll, the important factors were re-evaluated in order to conduct the next round of Delphi in the form of a questionnaire with 21 questions related to the important sub-factors, the collected data It showed the confirmation of all subfactors. Finally, the data was analyzed using the hierarchical analysis method and using Expert Choice software.



Resultss and Discussion

Based on the results, 5 main factors and 21 sub-factors affecting organizational information leakage were identified. The weighting and prioritization of indicators showed that intentional individual factors (0.277) ranked first, unintentional individual factors (0.235) ranked second, organizational factors (0.188) ranked third, infrastructural factors (0.167) ranked fourth and environmental factors (0.133) ranked fifth.



Conclusion

The results showed that information leakage is a complex phenomenon that various individual, organizational, infrastructural and environmental factors are involved in its occurrence. However, the first and second rank of the intentional and unintentional dimensions of information leakage by individuals, on the one hand, indicate the complexity of the information leakage phenomenon, and on the other hand, require a review in the strategies related to human resources management in Ahvaz International Airport.

Based on the results, intentional individual factors with a weight of 0.277 were the first effective factors on information leakage in Ahvaz International Airport. Also, among intentional individual sub-factors, personal greed with a weight of 0.232 was the most important sub-factor and the experience of invasion of privacy with a weight of 0.078 was the least important sub-factor. The findings confirmed that intentional information leakage due to human factors should still be of concern to managers. Since it is not possible to abandon human factors in the organizational life cycle of information, managers should accept this challenge and look for appropriate mechanisms. In other words, despite human factors, organizations face the challenge of intentional or unintentional information leakage. Intentional leakage of information in the organization may have happened due to personal greed against organizational interests, where employees are willing to sell the organization's information to competitors for material reasons and prefer their interests over the interests of the organization. Jealousy of a company employee to colleagues or employees of competing companies, being dissatisfied with the company or feeling a grudge for any reason also causes the intentional leakage of information. Disgruntled employees may also intentionally disclose important information to unauthorized parties. Unintentional individual factors with a weight of 0.235 were the second most effective factors on information leakage in Ahvaz International Airport. Also, among unintentional individual sub-factors, negligence with a weight of 0.283 was the most important sub-factor and the use of contract and temporary employees with a weight of 0.133 was the least important sub-factor. An inadvertent leak occurs when an insider inadvertently discloses business-critical information that is not intended to be shared with third parties. Unintentional individual threat is the potential behavior of an individual who has access to the network, system or data of an organization through an accidental act or action, without malicious intent, and causes damage or significantly increases the likelihood of serious damage in the future to confidentiality, integrity Or the value of the organization's information.

Organizational factors with a weight of 0.188 were the third most effective factors on information leakage in Ahvaz International Airport. Also, among the organizational sub-factors, lack of understanding the value of information with a weight of 0.392 was the most important sub-factor and lack of proper intra-organizational communication with a weight of 0.262 was the least important sub-factor. The first is a lack of understanding of the value of information. Employees evaluate information differently depending on the hierarchical level, the type of information and the type of organizational structure. Employees' perception of the value of information is described by various researchers as an important aspect. This lack of awareness leads to the fact that the value of information is not clear, so the negative consequences of information leakage are not taken seriously by them. The second case is inappropriate organizational structure. Large companies are sensitive to data protection in the long term. Smaller companies do not have such extensive awareness. In general, organizational structure in terms of formality and existing control mechanisms may affect information leakage. The third case is the lack of proper communication within the organization. To achieve shared understanding, communication is required to convey a set of necessary values ​​and norms that define the rules or context of interaction. Infrastructural factors with a weight of 0.167 were the fourth most effective factor on information leakage in Ahvaz International Airport. Similarly, among the infrastructure sub-factors, the weakness of information systems with a weight of 0.418 was the most important sub-factor and the presence of security holes in the network infrastructure with a weight of 0.258 was the least important sub-factor. The first is the weakness of information systems. Buying an incomplete information system and weak design of information systems may cause serious problems for organizations. Mechanisms that insiders use to perform business tasks based on their usual information systems can also be used to steal information assets. To prevent leakage and theft of information, mechanisms and protective measures against these methods should be used. The second case is improper use of physical means of data storage (hard drives, USB, CD, etc.). These days, most of the information inside the organization is stored electronically, the media of this information are hard drives, C drives. D. and U. S. etc.) are physical tools that are likely to be physically stolen. Preventing leakage with these devices requires implementing physical security measures. The third thing is the presence of security holes in the network infrastructure. The organization's networks are one of the essential parts of the organization's information technology infrastructure. There are several types of communication in the network. Internal-to-external communication includes any communication that is initiated within the boundaries of the organization and whose destination is outside the organization.

Finally, environmental factors with a weight of 0.133 were the fifth most effective factors on information leakage in Ahvaz International Airport. Also, among the environmental sub-factors, the stakeholders' request for information about security incidents with a weight of 0.416 was the most important sub-factor and the requirements of business partners with a weight of 0.259 was the least important sub-factor. One of the input sources that shape the behavior of people in an organization is the organizational environment. Employee decisions are influenced by environmental structure, the availability of environmental information, and the relevant meaning that employees assign to environmental information. The first case is the request of stakeholders to inform about security incidents. In the recent era, the demand for the type of information leakage events for companies is more intense, external and internal stakeholders are constantly concerned about maintaining a good public image of the organization. Overall, public interest in data breach incidents appears to exert pressure on organizations, while organizational responses are dynamic and appear to change over time. If stakeholder expectations are ignored and social influence is allowed to run its course, political and legal pressure will build, often leading to negative corporate outcomes. Stakeholder dissatisfaction arises when corporate actions do not meet societal expectations, and the gap between corporate actions and stakeholder expectations widens as public trust declines. Therefore, the greater the employees' understanding of information protection as a social expectation, the greater the perception of public leakage events as a threat to the company's image.

In general, the results show that information leakage is a major concern for organizations. In this context, the more the organization depends on information assets, the more relevant the concern of information leakage becomes. In such a situation, the taste of the competitors is stimulated more and more to think of the necessary mechanism to deal with it by getting the information of the organization, while being aware of the related organization's plans. Therefore, the identification of factors affecting information leakage in the form of 21 sub-factors in 5 groups provided the necessary insight to the managers of Ahvaz airport to strengthen the vulnerable points by adopting the necessary measures such as building trust, strengthening the sense of cooperation, observing professional ethics. , using motivational measures, raising awareness of the value of information, proper training of employees regarding information security, redesigning information systems, and designing targeted programs regarding information storage, sharing, and transfer.
Keywords
Leakage of Organizational Information
Information Security
Information Confidentiality
Information Flow
Information Policies of the Organization
اسمعیلی، مریم؛ کفشیان اهر، هاجر. (1398). به اشتراک‌گذاری اطلاعات، نشت اطلاعات و تحریف اطلاعات در یک زنجیره تأمین غیرمتمرکز با یک تولیدکننده و دو خرده‌فروش رقیب. نشریه پژوهش‌های مهندسی صنایع در سیستم‌های تولید، 7(14)، 13-27.
Abdul Molok, N. N., Ahmad, A., & Chang, S. (2010). Understanding the factors of information leakage through online social networking to safeguard organizational information, 1-17.
حسن‌نیا، محمد حسین؛ دهقانی، مهدی. (1392). بررسی روش‌های نشت اطلاعات و راه‌کارهای جلوگیری از آن. فصلنامه پدافند غیرعامل، 4(4)، 1-12.
Abdul Molok, N. N., Chang, S., & Ahmad, A. (2013). Disclosure of organizational information on social media: Perspectives from security managers, PACIS 2013 Proceedings. 108.
صادقی، امیرعباس؛ رزاقی، حمید و احمدی، ثریا. (1402). تعیین مقوله‌های موثر بر نقض حریم خصوصی کاربران در شبکه اجتماعی اینستاگرام. پایاشهر، 5: 57.
Anand, K. S., & Goyal, M. (2009). Strategic information management under leakage in a supply chain. Management Science, 55(3), 438-452. [DOI:10.1287/mnsc.1080.0930]
طالش، عاطفه؛ فراهی، احمد. (1395). بررسی روش های پیشگیری از نشت اطلاعات. کنفرانس بین‌المللی پژوهش در علوم و مهندسی، 1-8.
Bloodgood, J. M., & Chen, A. N. (2021). Preventing organizational knowledge leakage: the influence of knowledge seekers' awareness, motivation and capability. Journal of Knowledge Management, 1-32. [DOI:10.1108/JKM-12-2020-0894]
لشگری، سیامک؛ احمدی آبکناری، فاطمه. (1398). توسعه و دسته‌بندی قوانین حفظ حریم خصوصی کاربران در شبکه‌های اجتماعی بر حسب نوع نشت اطلاعات، کنفرانس ملی آینده پژوهی، مدیریت و توسعه پایدار، تهران، 1-13.
Bouke, M. A., Abdullah, A., Udzir, N. I., & Samian, N. (2024). Overcoming the Challenges of Data Lack, Leakage, and Dimensionality in Intrusion Detection Systems: A Comprehensive Review. Journal of Communication and Information Systems, 39(1).
https://doi.org/10.14209/jcis.2024.3 [DOI:10.14209/jcis.2024.3.]
نگهدار، ایرج؛ پورقهرمانی، بابک و بیگی، جمال. (1402). سیاستگذاری جنایی در نقض امنیت سایبری و رهیافت‌های پیشگیری اجتماعی. فصلنامه سیاستگذاری عمومی، 9(2) 96- 114.
Cappellozza, A., de Moraes, G. H. S. M., Perez, G., & Simões, A. L. (2021). Antecedent factors of violation of information security rules. RAUSP Management Journal, 2531-0488. [DOI:10.1108/RAUSP-02-2021-0022]
Abdul Molok, N. N., Ahmad, A., & Chang, S. (2010). Understanding the factors of information leakage through online social networking to safeguard organizational information, 1-17.
Cheng, L., Liu, F., & Yao, D. (2017). Enterprise data breach: causes, challenges, prevention, and future directions. Wiley Interdisciplinary Reviews: Data Mining and Knowledge Discovery, 7(5), e1211. [DOI:10.1002/widm.1211]
Abdul Molok, N. N., Chang, S., & Ahmad, A. (2013). Disclosure of organizational information on social media: Perspectives from security managers, PACIS 2013 Proceedings. 108.
Dolezel, D., Beauvais, B., Stigler Granados, P., Fulton, L., & Kruse, C. S. (2023). Effects of Internal and External Factors on Hospital Data Breaches: Quantitative Study. Journal of Medical Internet Research, 25, e51471.‏ doi: 10.2196/51471


Greitzer, F. L., Strozer, J. R., Cohen, S., Moore, A. P., Mundie, D., & Cowley, J. (2014). Analysis of unintentional insider threats deriving from social engineering exploits. In 2014 IEEE Security and Privacy Workshops, 236-250.
https://doi.org/10.1109/SPW.2014.39 [DOI:10.2196/51471]
Anand, K. S., & Goyal, M. (2009). Strategic information management under leakage in a supply chain. Management Science, 55(3), 438-452.
Greitzer, F. L., Strozer, J., Cohen, S., Bergey, J., Cowley, J., Moore, A., & Mundie, D. (2014). Unintentional insider threat: contributing factors, observables, and mitigation strategies. In 2014 47th Hawaii International Conference on System Sciences (pp. 2025-2034). IEEE. [DOI:10.1109/HICSS.2014.256]
Bloodgood, J. M., & Chen, A. N. (2021). Preventing organizational knowledge leakage: the influence of knowledge seekers' awareness, motivation and capability. Journal of Knowledge Management, 1-32.
Hadasch, F., Mueller, B., & Maedche, A. (2012). Exploring Antecedent Environmental and Organizational Factors to User-Caused Information Leaks: A Qualitative Study, 127.
Bouke, M. A., Abdullah, A., Udzir, N. I., & Samian, N. (2024). Overcoming the Challenges of Data Lack, Leakage, and Dimensionality in Intrusion Detection Systems: A Comprehensive Review. Journal of Communication and Information Systems, 39(1).
Jašari, A. (2015). Information systems at the airport. PROCEEDING BOOK, 8.‏ Retrieved from: https://icesos.ibu.edu.ba/wp-content/uploads/2019/02/PROCEEDING-BOOK_V41.10.2015-min.pdf#page=8
Kim, S.-H., Kim, N.-U., & Chung, T.-M. (2015). Study on sensitive information leakage vulnerability modeling. Kybernetes, 44(1), 77-88. [DOI:10.1108/K-05-2014-0106]
Cappellozza, A., de Moraes, G. H. S. M., Perez, G., & Simões, A. L. (2021). Antecedent factors of violation of information security rules. RAUSP Management Journal, 2531-0488.
Li, J., Xiao, W., & Zhang, C. (2023). Data security crisis in universities: identification of key factors affecting data breach incidents. Humanities and Social Sciences Communications, 10(1), 1-18. Retrieved from: [DOI:10.1057/s41599-023-01757-0]
Cheng, L., Liu, F., & Yao, D. (2017). Enterprise data breach: causes, challenges, prevention, and future directions. Wiley Interdisciplinary Reviews: Data Mining and Knowledge Discovery, 7(5), e1211.
Madnick, S. E. (2023). The Continued Threat to Personal Data: Key Factors Behind the 2023 Increase.‏
Dolezel, D., Beauvais, B., Stigler Granados, P., Fulton, L., & Kruse, C. S. (2023). Effects of Internal and External Factors on Hospital Data Breaches: Quantitative Study. Journal of Medical Internet Research, 25, e51471.‏ doi: 10.2196/51471
Martel, N., & Seneviratne, P. N. (1990). Analysis of factors influencing quality of service in passenger terminal buildings. Transportation Research Record, (1273).‏
Esmaeili, M. & Kafshian Ahar, H. (2019). Information sharing, information leakage and information distortion in a decentralized supply chain with one manufacturer and two competing retailers. Journal of Industrial engineering Research in Production Systems. 7(14): 13-27. Doi: 10.22084/ier.2019.14110.1642. (Persian)
Mughal, Y. H. (2021). Impact of Supply Chain Information Integration on Operational Performance of Pharmaceutical Firms: Mediating Role of Information Leakage. Journal of Pharmaceutical Research International, 33(41B), 69-78. [DOI:10.9734/jpri/2021/v33i41B32346]
Greitzer, F. L., Strozer, J. R., Cohen, S., Moore, A. P., Mundie, D., & Cowley, J. (2014). Analysis of unintentional insider threats deriving from social engineering exploits. In 2014 IEEE Security and Privacy Workshops, 236-250.
Negahdar, E., pourghahramani, B., & Beigi, J. (2023). Criminal Policy making in Cyber Security Violations and Social Prevention Approaches. Iranian Journal of Public Policy, 9(2), 97-114. doi: 10.22059/jppolicy.2023.93610
Greitzer, F. L., Strozer, J., Cohen, S., Bergey, J., Cowley, J., Moore, A., & Mundie, D. (2014). Unintentional insider threat: contributing factors, observables, and mitigation strategies. In 2014 47th Hawaii International Conference on System Sciences (pp. 2025-2034). IEEE.
Purnell, J. (2012). Information technology systems at Airports: A Primer (Vol. 59). Transportation Research Board.‏
Hadasch, F., Mueller, B., & Maedche, A. (2012). Exploring Antecedent Environmental and Organizational Factors to User-Caused Information Leaks: A Qualitative Study, 127.
Rauscher, F., Kogler, A., Juffinger, J., & Gruss, D. (2024, February). IdleLeak: Exploiting Idle State Side Effects for Information Leakage. In Network and Distributed System Security (NDSS) Symposium 2024.‏ Retrieved from: https://www.ndss-symposium.org/wp-content/uploads/2024-78-paper.pdf. [DOI:10.14722/ndss.2024.24078]
Hasan Nia, M. H. & Dehghani, M. (2013). Examining the methods of information compromise and its countermeasures techniques. Inactive Defense Magazine, 4(4): 1-12. (Persian).
Rogers, Z., Benjamin, V., & Gopalakrishnan, M. (2018). Cyber security in supply chains: Understanding threats and potential security practices. Report. Center for Advanced Procurement Strategy, Tempe, AZ.
Jašari, A. (2015). Information systems at the airport. PROCEEDING BOOK, 8.‏ Retrieved from: https://icesos.ibu.edu.ba/wp-content/uploads/2019/02/PROCEEDING-BOOK_V41.10.2015-min.pdf#page=8
Ritala, P., Olander, H., Michailova, S., & Husted, K. (2015). Knowledge sharing, knowledge leaking and relative innovation performance: An empirical study. Technovation, 35, 22-31. [DOI:10.1016/j.technovation.2014.07.011]
Kim, S.-H., Kim, N.-U., & Chung, T.-M. (2015). Study on sensitive information leakage vulnerability modeling. Kybernetes, 44(1), 77-88.
Sadeghi, A., Razaghi, H. & Ahmadi, S. (2023). Determining the factors affecting users' privacy in the Instagram social network. Paya Shahr, 5: 1-23. https://civilica.com/doc/1891414
Lashghari, S. & Ahmadi Abkenari, F. (2019). Development and classification of user privacy rules in social networks according to the type of information leakage. National Conference on Future Studies, Management and Sustainable Development. Ghazvin (November 2019), Imam Khomeini International University. (Persian)
Schultz, M., Schulz, C., & Fricke, H. (2007, December). Enhanced information flow and guidance in airport terminals using best passenger's visual perception. In Eurocontrol INO Workshop.‏

Tan, K. H., Wong, W. P., & Chung, L. (2016). Information and knowledge leakage in supply chain. Information Systems Frontiers, 18(3), 621-638. [DOI:10.1007/s10796-015-9553-6]
Li, J., Xiao, W., & Zhang, C. (2023). Data security crisis in universities: identification of key factors affecting data breach incidents. Humanities and Social Sciences Communications, 10(1), 1-18. Retrieved from:
Tran, T. T. H., Childerhouse, P., & Deakins, E. (2016). Supply chain information sharing: challenges and risk mitigation strategies. Journal of Manufacturing Technology Management, 27(8), 1102-1126. [DOI:10.1108/JMTM-03-2016-0033]
Madnick, S. E. (2023). The Continued Threat to Personal Data: Key Factors Behind the 2023 Increase.‏
van der Kleij, R., Wijn, R., & Hof, T. (2020). An application and empirical test of the Capability Opportunity Motivation-Behaviour model to data leakage prevention in financial organizations. Computers & Security, 97, 101970. [DOI:10.1016/j.cose.2020.101970]
Martel, N., & Seneviratne, P. N. (1990). Analysis of factors influencing quality of service in passenger terminal buildings. Transportation Research Record, (1273).‏
Wong, W. P., Tan, K. H., Chuah, S. H. W., Tseng, M. L., Wong, K. Y., & Ahmad, S. (2020). Information sharing and the bane of information leakage: a multigroup analysis of contract versus noncontract. Journal of Enterprise Information Management. [DOI:10.1108/JEIM-11-2019-0368]
Mughal, Y. H. (2021). Impact of Supply Chain Information Integration on Operational Performance of Pharmaceutical Firms: Mediating Role of Information Leakage. Journal of Pharmaceutical Research International, 33(41B), 69-78.
Wong, W. P., Tan, K. H., Govindan, K., Li, D., & Kumar, A. (2021). A conceptual framework for information-leakage-resilience. Annals of Operations Research, 1-21. [DOI:10.1007/s10479-021-04219-5]
Negahdar, E., pourghahramani, B., & Beigi, J. (2023). Criminal Policy making in Cyber Security Violations and Social Prevention Approaches. Iranian Journal of Public Policy, 9(2), 97-114. doi: 10.22059/jppolicy.2023.93610
Wong, W. P., Tan, H. C., Tan, K. H., & Tseng, M. L. (2019). Human factors in information leakage: mitigation strategies for information sharing integrity. Industrial Management & Data Systems, 119(6), 1242-1267.‏ [DOI:10.1108/IMDS-12-2018-0546]
Purnell, J. (2012). Information technology systems at Airports: A Primer (Vol. 59). Transportation Research Board.‏
Wong, W.P., Tan, H.C., Tan, K.H., & Tseng, M. (2020). Human factors in information leakage: mitigation strategies for information sharing integrity. Ind. Manag. Data Syst., 119, 1242-1267. www.dictionary.cambridge.org. [DOI:10.1108/IMDS-12-2018-0546]
Rauscher, F., Kogler, A., Juffinger, J., & Gruss, D. (2024, February). IdleLeak: Exploiting Idle State Side Effects for Information Leakage. In Network and Distributed System Security (NDSS) Symposium 2024.‏ Retrieved from: https://www.ndss-symposium.org/wp-content/uploads/2024-78-paper.pdf.
Rogers, Z., Benjamin, V., & Gopalakrishnan, M. (2018). Cyber security in supply chains: Understanding threats and potential security practices. Report. Center for Advanced Procurement Strategy, Tempe, AZ.
Ritala, P., Olander, H., Michailova, S., & Husted, K. (2015). Knowledge sharing, knowledge leaking and relative innovation performance: An empirical study. Technovation, 35, 22-31.
Sadeghi, A., Razaghi, H. & Ahmadi, S. (2023). Determining the factors affecting users' privacy in the Instagram social network. Paya Shahr, 5: 1-23. https://civilica.com/doc/1891414
Schultz, M., Schulz, C., & Fricke, H. (2007, December). Enhanced information flow and guidance in airport terminals using best passenger's visual perception. In Eurocontrol INO Workshop.‏
Talesh, A. & Farahi, A. (2016). Investigating methods to prevent information leakage. In: International Congress on Engineerin Innovation & Technology Development (ICEITD). Tabriz (19 May 2016) Tabriz University. (Persian)
Tan, K. H., Wong, W. P., & Chung, L. (2016). Information and knowledge leakage in supply chain. Information Systems Frontiers, 18(3), 621-638.
Tran, T. T. H., Childerhouse, P., & Deakins, E. (2016). Supply chain information sharing: challenges and risk mitigation strategies. Journal of Manufacturing Technology Management, 27(8), 1102-1126.
van der Kleij, R., Wijn, R., & Hof, T. (2020). An application and empirical test of the Capability Opportunity Motivation-Behaviour model to data leakage prevention in financial organizations. Computers & Security, 97, 101970.
Wong, W. P., Tan, K. H., Chuah, S. H. W., Tseng, M. L., Wong, K. Y., & Ahmad, S. (2020). Information sharing and the bane of information leakage: a multigroup analysis of contract versus noncontract. Journal of Enterprise Information Management.
Wong, W. P., Tan, K. H., Govindan, K., Li, D., & Kumar, A. (2021). A conceptual framework for information-leakage-resilience. Annals of Operations Research, 1-21.
Wong, W. P., Tan, H. C., Tan, K. H., & Tseng, M. L. (2019). Human factors in information leakage: mitigation strategies for information sharing integrity. Industrial Management & Data Systems, 119(6), 1242-1267.‏
Wong, W.P., Tan, H.C., Tan, K.H., & Tseng, M. (2020). Human factors in information leakage: mitigation strategies for information sharing integrity. Ind. Manag. Data Syst., 119, 1242-1267. www.dictionary.cambridge.org.
Abdul Molok, N. N., Ahmad, A., & Chang, S. (2010). Understanding the factors of information leakage through online social networking to safeguard organizational information, 1-17.
Abdul Molok, N. N., Chang, S., & Ahmad, A. (2013). Disclosure of organizational information on social media: Perspectives from security managers, PACIS 2013 Proceedings. 108.
Anand, K. S., & Goyal, M. (2009). Strategic information management under leakage in a supply chain. Management Science, 55(3), 438-452.
Bloodgood, J. M., & Chen, A. N. (2021). Preventing organizational knowledge leakage: the influence of knowledge seekers' awareness, motivation and capability. Journal of Knowledge Management, 1-32.
Bouke, M. A., Abdullah, A., Udzir, N. I., & Samian, N. (2024). Overcoming the Challenges of Data Lack, Leakage, and Dimensionality in Intrusion Detection Systems: A Comprehensive Review. Journal of Communication and Information Systems, 39(1).
Cappellozza, A., de Moraes, G. H. S. M., Perez, G., & Simões, A. L. (2021). Antecedent factors of violation of information security rules. RAUSP Management Journal, 2531-0488.
Cheng, L., Liu, F., & Yao, D. (2017). Enterprise data breach: causes, challenges, prevention, and future directions. Wiley Interdisciplinary Reviews: Data Mining and Knowledge Discovery, 7(5), e1211.
Dolezel, D., Beauvais, B., Stigler Granados, P., Fulton, L., & Kruse, C. S. (2023). Effects of Internal and External Factors on Hospital Data Breaches: Quantitative Study. Journal of Medical Internet Research, 25, e51471.‏ doi: 10.2196/51471
Greitzer, F. L., Strozer, J. R., Cohen, S., Moore, A. P., Mundie, D., & Cowley, J. (2014). Analysis of unintentional insider threats deriving from social engineering exploits. In 2014 IEEE Security and Privacy Workshops, 236-250.
Greitzer, F. L., Strozer, J., Cohen, S., Bergey, J., Cowley, J., Moore, A., & Mundie, D. (2014). Unintentional insider threat: contributing factors, observables, and mitigation strategies. In 2014 47th Hawaii International Conference on System Sciences (pp. 2025-2034). IEEE.
Hadasch, F., Mueller, B., & Maedche, A. (2012). Exploring Antecedent Environmental and Organizational Factors to User-Caused Information Leaks: A Qualitative Study, 127.
Jašari, A. (2015). Information systems at the airport. PROCEEDING BOOK, 8.‏ Retrieved from: https://icesos.ibu.edu.ba/wp-content/uploads/2019/02/PROCEEDING-BOOK_V41.10.2015-min.pdf#page=8
Kim, S.-H., Kim, N.-U., & Chung, T.-M. (2015). Study on sensitive information leakage vulnerability modeling. Kybernetes, 44(1), 77-88.
Li, J., Xiao, W., & Zhang, C. (2023). Data security crisis in universities: identification of key factors affecting data breach incidents. Humanities and Social Sciences Communications, 10(1), 1-18. Retrieved from:
Madnick, S. E. (2023). The Continued Threat to Personal Data: Key Factors Behind the 2023 Increase.‏
Martel, N., & Seneviratne, P. N. (1990). Analysis of factors influencing quality of service in passenger terminal buildings. Transportation Research Record, (1273).‏
Mughal, Y. H. (2021). Impact of Supply Chain Information Integration on Operational Performance of Pharmaceutical Firms: Mediating Role of Information Leakage. Journal of Pharmaceutical Research International, 33(41B), 69-78.
Negahdar, E., pourghahramani, B., & Beigi, J. (2023). Criminal Policy making in Cyber Security Violations and Social Prevention Approaches. Iranian Journal of Public Policy, 9(2), 97-114. doi: 10.22059/jppolicy.2023.93610
Purnell, J. (2012). Information technology systems at Airports: A Primer (Vol. 59). Transportation Research Board.‏
Rauscher, F., Kogler, A., Juffinger, J., & Gruss, D. (2024, February). IdleLeak: Exploiting Idle State Side Effects for Information Leakage. In Network and Distributed System Security (NDSS) Symposium 2024.‏ Retrieved from: https://www.ndss-symposium.org/wp-content/uploads/2024-78-paper.pdf.
Rogers, Z., Benjamin, V., & Gopalakrishnan, M. (2018). Cyber security in supply chains: Understanding threats and potential security practices. Report. Center for Advanced Procurement Strategy, Tempe, AZ.
Ritala, P., Olander, H., Michailova, S., & Husted, K. (2015). Knowledge sharing, knowledge leaking and relative innovation performance: An empirical study. Technovation, 35, 22-31.
Sadeghi, A., Razaghi, H. & Ahmadi, S. (2023). Determining the factors affecting users' privacy in the Instagram social network. Paya Shahr, 5: 1-23. https://civilica.com/doc/1891414
Schultz, M., Schulz, C., & Fricke, H. (2007, December). Enhanced information flow and guidance in airport terminals using best passenger's visual perception. In Eurocontrol INO Workshop.‏
Tan, K. H., Wong, W. P., & Chung, L. (2016). Information and knowledge leakage in supply chain. Information Systems Frontiers, 18(3), 621-638.
Tran, T. T. H., Childerhouse, P., & Deakins, E. (2016). Supply chain information sharing: challenges and risk mitigation strategies. Journal of Manufacturing Technology Management, 27(8), 1102-1126.
van der Kleij, R., Wijn, R., & Hof, T. (2020). An application and empirical test of the Capability Opportunity Motivation-Behaviour model to data leakage prevention in financial organizations. Computers & Security, 97, 101970.
Wong, W. P., Tan, K. H., Chuah, S. H. W., Tseng, M. L., Wong, K. Y., & Ahmad, S. (2020). Information sharing and the bane of information leakage: a multigroup analysis of contract versus noncontract. Journal of Enterprise Information Management.
Wong, W. P., Tan, K. H., Govindan, K., Li, D., & Kumar, A. (2021). A conceptual framework for information-leakage-resilience. Annals of Operations Research, 1-21.
Wong, W. P., Tan, H. C., Tan, K. H., & Tseng, M. L. (2019). Human factors in information leakage: mitigation strategies for information sharing integrity. Industrial Management & Data Systems, 119(6), 1242-1267.‏
Wong, W.P., Tan, H.C., Tan, K.H., & Tseng, M. (2020). Human factors in information leakage: mitigation strategies for information sharing integrity. Ind. Manag. Data Syst., 119, 1242-1267. www.dictionary.cambridge.org.
Human and Information Interaction
Volume 11, Issue 1
Spring 2024
Pages 33-57