Opportunities for Computer Abuse: Assessing a Crime Specific Approach in the Case of Barings Bank

..................................................................................................................................... 3 Acknowledgements .................................................................................................................... 4 List of Figures ............................................................................................................................ 9 Chapter One: Research Issues ......................................................................... 10 1.1 Motivations and Scope of the Research .............................................................................. 10 1.2 Definitions of IS and IS Security ........................................................................................ 12 1.3 Current Status of IS Security Research on Opportunity ..................................................... 14 1.4 Objectives of the Research .................................................................................................. 14 1.5 Thesis Structure ................................................................................................................... 15 Chapter Two: Literature Review .................................................................... 18 2.1 Opportunity as a Motivational Factor ................................................................................. 18 2.2 Opportunity Formation Through Deficient Security .......................................................... 19 2.2.1 Organisational Complacency Towards IS Security ................................................... 20 2.2.2 Erroneous Perceptions of IS Security Risks ............................................................... 22 2.2.3 Technical Perspective of IS Security .......................................................................... 23 2.2.4 Funding of IS Security ................................................................................................ 24 2.2.5 Assessing Risks ........................................................................................................... 25 2.2.6 The Interrelated Nature of Security Controls ............................................................. 26 2.2.7 Implementation of Inappropriate Controls ................................................................. 27 2.2.8 Safeguard Implementation .......................................................................................... 30 2.2.9 Compliance Reviews .................................................................................................. 31 2.3 Deficiencies in Existing Notions of Opportunity ................................................................ 35 2.4 Conclusion ........................................................................................................................... 36 Chapter Three: Theoretical Framework .......................................................... 38 3.1 SCP ....................................................................................................................................... 38 3.1.1 Situational Crime Prevention Defined ....................................................................... 40 3.1.2 Theoretical Origins of SCP ......................................................................................... 42 3.2 The Rational Choice Perspective ........................................................................................ 44