Date of Conferral

4-26-2024

Date of Award

April 2024

Degree

Doctor of Information Technology (D.I.T.)

School

Information Systems and Technology

Advisor

Alan Dawson

Abstract

Lack of security in Mobile Cloud Computing (MCC) networks is likely to have negative consequences. Information security managers are concerned with the lack of security in MCC networks because it is the number one reason for the low implementation of MCC. Grounded in the integrated system theory of information systems, the purpose of this qualitative pragmatic inquiry study was to identify strategies necessary to secure users’ personal data against security threats in MCC networks. The participants comprised four information security managers from two financial technology organizations in Northeastern Massachusetts implementing various strategies to secure their user's data against security threats in their MCC networks. Data were collected using semi-structured interviews and a review of five organizational documents. Four themes emerged from the thematic analysis: (a) strong authentication and authorization controls, (b) encryption, (c) user awareness and education, and (d) following the industry standard of information security. A key recommendation is for Information security leaders to adequately educate their employees through quarterly employee training on the latest MCC security issues and how to protect their sensitive information and that of their organizations. The implications for positive social change include the potential for organizations to cut down their financial losses acquired from security breaches and the protection of consumers from high risks and the cost of identity theft.

Share

 
COinS