Date of Conferral

10-22-2026

Date of Award

October 2026

Degree

Doctor of Information Technology (D.I.T.)

School

Information Systems and Technology

Advisor

Cynthia Phillips

Abstract

Information Technology (IT) managers are concerned about the increased risks of unauthorized access, data breaches, and exposure of sensitive organizational information when proprietary data are inadequately protected during remote access through virtual private networks (VPNs). These security vulnerabilities threaten data confidentiality, organizational operations, regulatory compliance, and financial stability, making effective VPN security management a critical responsibility for IT managers. The purpose of this qualitative multiple case study, guided by protection motivation theory, was to identify strategies IT managers used to secure proprietary data during VPN-based remote access. Participants included five IT managers in the southeastern United States who had successfully implemented data protection strategies. Data were collected through semistructured interviews and analyzed using thematic analysis. Five themes emerged: layered security architecture, zero-trust and access control, policy compliance and enforcement, human factor and security culture, and incident response and trust rebuilding. Findings emphasized integrating technical safeguards, organizational policies, employee accountability, and incident response. A key recommendation is for IT managers to implement continuous cybersecurity awareness training, zero-trust frameworks, automated compliance controls, and established incident response procedures. The implications for positive social change include the potential for IT managers to strengthen information security, reduce employees’ exposure to cybersecurity threats, and promote safer remote work environments while benefiting local communities through increased confidence in digital systems and fewer cybersecurity disruptions.

Download

Share

 
COinS