Recognition and Prevention of Confidential Information Acquisition Through Business Media Communication

In the diploma thesis, I first present the basics of communication. From the basic concept of data to information as an upgrade and finally the formation of a message. In the conclusion, I upgrade the thesis by confronting the obtained results of the research work and with the completed analysis and proposals I lean towards a simple sentence. Step by step towards better information security.

Problem

In the diploma thesis, I first present the basics of communication. From the basic concept of data to information as an upgrade and finally the formation of a message. As manipulation and recognition and prevention of confidential information acquisition, I define social engineering within the framework of information security and its specific characteristics as the greatest threat of their time.

Results

In the conclusion, I upgrade the thesis by confronting the obtained results of the research work and with the completed analysis and proposals I lean towards a simple sentence. Step by step towards better information security. To claim that you have a completely secure information system is nowadays a very bold statement that can only be made by someone who does not possess even a shred of knowledge about information protection or is not at all aware of the dangers that lurk at every corner.

Data and information are key components and represent the guideline of progress or the driving force of their time. They can represent our greatest asset or market commodity, which we must protect and constantly ask ourselves whether enough has been done to keep it that way. Security must be viewed as a process that is dynamic and always ongoing, it must not become a state, as we must never be convinced that they will be safe in the future if they are safe today.

All further considerations about security lead us to the realisation that it is necessary to assess the risk of loss or misuse of data from case to case. Are we aware of the value of their data or do we live in the belief that nothing bad can happen to us? The most common cases can be grouped together and linked into two main factors, taking into account errors or defects in hardware.

The main factors are malicious software code and the weakest link in the data security chain, which is man himself. On one hand, this can be attributed to self-interest, on the other hand, man himself with his nature contributes and unwittingly offers all the necessary information and data on a silver platter. Taking advantage of human trust and the psychological inclination to help one's neighbour, with the aim of obtaining information and benefits, is called social engineering.

In the Slovenian area, it is quite unknown and as the questionnaire showed, more than half of the people do not believe that they can be deceived in a professional manner by appropriately trained people. Let us be aware that we can quite quickly succumb to manipulation. The information itself is only part of the mosaic and is in itself useless, worthless, if it is not supported by knowledge, which represents the decisive importance factor.

The reporter's experience, a useful option, an appropriate communication tool or communication channel, ensure that the recipient receives the information in the right form and at the right time. Hardware, with the help of predetermined communication protocols, performs a flawless transaction of information and serves only the purpose for which it was designed. Unfortunately, technology alone is not enough to adequately protect their information assets.

First and foremost, people, processes and procedures are needed, and as a basis, an adopted security policy that determines what and how to protect, anticipate the consequences of losses and determine measures for sanctioning. What about man? The centre of events must always be man, who must be aware that the security of information assets is today in first place.

Information security does not only concern the business world, but also every individual. He is convinced that companies will face all security issues in the future, when they will be forced in some way by legal regulation to ensure the expected level of information security. The main guideline must be repeated education and awareness-raising of people, which together with implemented procedures, processes and regulations in companies, also with advertising in the media, of course with appropriate technical support, satisfies an adequate level of information security.

Through the exposition of the problem, research work and conclusions on this topic, the diploma thesis tries to stimulate awareness and mindset and at the same time many a question, for example, 'To what extent are you safe?'