Prioritizing Personal Data Protection in Insurance Organizations: A Review

A. Paro, “Hackers Leaked 22 Million Records on the Dark Web in 2020 - Security Boulevard,” securityboulevard blog, 2021. https://securityboulevard.com/2021/01/hackers-leaked-22-million-records-on-the-dark-web-in-2020/ (accessed Jul. 16, 2022).

Kaspersky, “Ransomware WannaCry: All you need to know,” Kaspersky, 2017. https://www.kaspersky.com/resource-center/threats/ransomware-wannacry (accessed Jul. 16, 2022).

NCCIC, “What is WannaCry?,” National Cybersecurity and Communications Integration Center. 2020. [Online]. Available: https://www.avast.com/c-wannacry

BBC News, “Lithuania urges people to throw away Chinese phones - BBC News,” 2021. https://www.bbc.com/news/technology-58652249 (accessed Jul. 16, 2022).

C. Rosch, “A massive cyberattack in Costa Rica leaves citizens hurting - Rest of World,” Rest of worlds news , Jun. 01, 2022. https://restofworld.org/2022/cyberattack-costa-rica-citizens-hurting/ (accessed Jul. 16, 2022).

B. Crothers, “Conti Ransomware Group Attacks Costa Rica, U.S. Responds With $15 Million Bounty | Venafi,” venafi. Inc, May 2022. https://www.venafi.com/blog/conti-ransomware-group-attacks-costa-rica-us-responds-15-million-bounty (accessed Jul. 16, 2022).

Heimdal Security, “Threat Report 2023: A 2022 Review of the Cyber-Threat Landscape and Prediction for 2023,” 2023.

CISA, FBI, and NSA, “Understanding and Mitigating Russian State- Sponsored Cyber Threats to U . S . Critical Infrastructure,” Jt. Cyber Secur. Advis., 2022.

A. Morrison, “Cyber Security Landscape 2022,” no. February, 2022.

P. O. Magutu, G. M. Ondimu, and C. J. Ipu, “Effects of Cybercrime on State Security : Types , Impact and Mitigations with the Fiber Optic Deployment in Kenya,” J. Inf. assuarence cyber secuirty, vol. 2011, no. 1, p. 21, 2017, doi: 10.5171/2011.618585.

A. Ertan, K. Floyd, P. Pernik, and T. Stevens, Cyber Threats and NATO 2030: Horizon Scanning and Analysis. 2020. [Online]. Available: www.ccdcoe.org

C. Cubbage, D. Matrai, and S. Babi, “Invest in intelligency now to prepare Australia’s utilities for the future,” Cyber risk Leaders: magazine for secuirty and technology professionals, no. 2, p. 52, 2020.

L. Irwin, “9 cyber security predictions for 2022 - IT Governance UK Blog,” IT Governance Blog, Feb. 15, 2022. https://www.itgovernance.co.uk/blog/9-cyber-security-predictions-for-2022 (accessed Jul. 20, 2022).

Business Daily, “Kenya cyber attacks up by half to 37m in one quarter - ,” Business Daily, 2020. https://www.businessdailyafrica.com/bd/economy/kenya-cyber-attacks-up-by-half-to-37m-in-one-quarter-2285138 (accessed May 14, 2023).

Business Today, “Kenya Records 278 Million Cyberattacks In 3 Just Months,” Business Today, Feb. 07, 2023. https://businesstoday.co.ke/kenya-records-278-million-cyberattacks-in-3-just-months/ (accessed May 14, 2023).

W. Musalia, “Ransomware: Naivas Supermarket’s System Hacked, Data Stolen - Tuko.co.ke,” Tuko news, Apr. 24, 2023. https://www.tuko.co.ke/business-economy/technology/503268-ransomware-naivas-supermarkets-system-hacked-data-stolen/ (accessed May 14, 2023).

Mandiant Investigator, “Global Perspectives on Threat Intelligence Report | Mandiant,” Mandiant, 2023. https://www.mandiant.com/resources/reports/global-perspectives-on-threat-intelligence (accessed May 05, 2023).

European information commisisioners office, “Guide to the General Data Protection Regulation ( GDPR ),” 2021.

V. C. Kanji and R. Njenga, “The Kenya Data Protection Act 2019,” A.B. Patel Patel Advocates, vol. 37, no. 4, pp. 161–163, 2021, [Online]. Available: https://abpateladvocates.com/data_protection_act_2019_kenya.php

Govornment of Kenya (GoK), The Data Protection Act 2019, vol. 41, no. 4. 2019, pp. 145–147. [Online]. Available: http://kenyalaw.org/kl/fileadmin/pdfdownloads/Acts/2019/TheDataProtectionAct__No24of2019.pdf

Government of Kenya (GoK), “the Data Protection Bill, 2018 Arrangement of Clauses Part Ii-Objects and Principles of Protection of Personal Data,” pp. 309–331, 2018, [Online]. Available: http://www.parliament.go.ke/sites/default/files/2017-05/Data_Protection_Bill_2018.pdf

Imperva softwares, “What is Personally Identifiable Information; PII Data Security ,” Imperva, 2021. https://www.imperva.com/learn/data-security/personally-identifiable-information-pii/ (accessed Jul. 27, 2022).

E. Mccallister, K. Scarfone, and T. Grance, “Guide to Protecting the Confidentiality of Personally Identifiable Information ( PII ) Recommendations of the National Institute of Standards and Technology,” Comput. Secur. Div. Inf. Technol. Lab. Natl. Inst. Stand. Technol., vol. 800, no. 122, p. 59, 2010.

Computer Solution East, “Protecting Your Data Is the Top Priority for Professional Services! We Get It,” Computer Solution East, Aug. 26, 2020. https://www.computersolutionseast.com/blog/managed-security-services/protecting-your-data-is-the-top-priority-for-professional-services-we-get-it/ (accessed Jul. 27, 2022).

S. D. Dorairaj and T. Kaliannan, “An Adaptive Multilevel Security Framework for the Data Stored in Cloud Environment,” Sci. World J., vol. 2015, 2015, doi: 10.1155/2015/601017.

M. Qingxiong, A. C. Johnston, and J. M. Pearson, “Information security management objectives and practices: A parsimonious framework,” Inf. Manag. Comput. Secur., vol. 16, no. 3, pp. 251–270, 2008, doi: 10.1108/09685220810893207.

S. Gittlen, “The Complete Guide to Ransomware,” 2021. [Online]. Available: https://www.techtarget.com/searchsecurity/Guide-to-preventing-phishing-and-ransomware

S. M. Kerner, “Ransomware Trends, Statistics and Facts in 2022,” TechTarget, Feb. 2022. https://www.techtarget.com/searchsecurity/feature/Ransomware-trends-statistics-and-facts (accessed Jul. 18, 2022).

Virustotal, “Ransomware i a global context,” Virustotal Report, no. October. 2021.

FBI, CISA, NSA, ACSC, and NCSC-UK, “2021 Trends Show Increased Globalized Threat of Ransomware,” 2022.

McGrathNicol Technology, “Ransomware epidemic continues to rise in 2022 The Rise in Ransomware Attacks,” 2022.

S. Alder, “CISA, FBI, NSA Warn of Increased Threat of Ransomware Attacks on Critical Infrastructure,” HIPAA J. , vol. 3, no. 2, Feb. 2022, Accessed: Jul. 19, 2022. [Online]. Available: https://www.hipaajournal.com/cisa-fbi-nsa-warn-of-increased-threat-of-ransomware-attacks-on-critical-infrastructure/

US Treasury, “Advisory on Ransomware and the Use of the Financial System to Facilitate Ransom Payments,” FinCen Advis., vol. 42, no. c, pp. 1–8, 2020.

E. Kost, “Advanced Persistent Threat (APT) | A Definition by UpGuard,” UpGuard, 2022. https://www.upguard.com/glossary/advanced-persistent-threat-apt (accessed May 05, 2023).

Financial Crimes Enforcement Network (FinCEN), “Advisory on Cybercrime and Cyber-Enabled Crime Exploiting the Coronavirus Disease 2019 ( COVID-19 ) Pandemic Financial Red Flag Indicators of Cybercrime and Cyber-Enabled Crime Exploiting COVID-19,” FinCen Advis., vol. 1, no. FIN-2020-A005, pp. 1–8, 2020.

liviu Arsena, “Anti-malware research:PT Hackers for Hire Used for Industrial Espionage,” Bitdefender anti-malware research, Aug. 20, 2020. https://www.bitdefender.com/blog/labs/apt-hackers-for-hire-used-for-industrial-espionage/ (accessed Jul. 20, 2022).

Bitdefender, “More Evidence of APT Hackers-for-Hire Used for Industrial Espionage,” 2020. [Online]. Available: https://www.bitdefender.com/files/News/CaseStudies/study/365/Bitdefender-PR-Whitepaper-APTHackers-creat4740-en-EN-GenericUse.pdf

T. Keary, “Experts discover a Chinese-APT cyber espionage operation targeting US organizations | VentureBeat,” VentureBeat technologies , Mar. 03, 2022. https://venturebeat.com/2022/05/03/experts-discover-chinese-cyber-espionage-operation/ (accessed Jul. 20, 2022).

C. Kime, “Advernced Persistant threat (APT) attack and prevention.” esecurity planet, p. 10, 2022.

A. Ribeiro, “Chinese APT espionage operation Twisted Panda targets Russia’s state-owned defense institutes - Industrial Cyber,” Industrial Cyber News, May 23, 2022. https://industrialcyber.co/vulnerabilities/chinese-apt-espionage-operation-twisted-panda-targets-russias-state-owned-defense-institutes/ (accessed Jul. 20, 2022).

D. Holmes, M. Papathanasaki, L. Maglaras, M. A. Ferrag, S. Nepal, and H. Janicke, “Digital Twins and Cyber Security - solution or challenge?,” 6th South-East Eur. Des. Autom. Comput. Eng. Comput. Networks Soc. Media Conf. SEEDA-CECNSM 2021, no. September, 2021, doi: 10.1109/SEEDA-CECNSM53056.2021.9566277.

M. Krigsman, “Improve Security with Real-Time Data and Digital Twins | Redis,” The data economy podcast , Redis, 2021. Accessed: Jul. 19, 2022. [Online]. Available: https://redis.com/the-data-economy-podcast/episode-5/

Siemens USA Technologies, “Trends and innovation in cyber security: AI, quantum computing and digital twins. ,” Ingenuity by Siemens, Jul. 05, 2022. https://ingenuity.siemens.com/2022/07/ai-quantum-computing-and-digital-twins/ (accessed Jul. 19, 2022).

C. K. Wee and R. Nayak, “A novel machine learning approach for database exploitation detection and privilege control,” J. Inf. Telecommun., vol. 3, no. 3, pp. 308–325, 2019, doi: 10.1080/24751839.2019.1570454.

A. Outchakoucht, A. A. El Kalam, H. Es-Samaali, and S. Benhadou, “Machine learning based access control framework for the internet of things,” Int. J. Adv. Comput. Sci. Appl., no. 2, pp. 331–340, 2020, doi: 10.14569/ijacsa.2020.0110243.

K. Alshammari, T. Beach, and Y. Rezgui, “Cybersecurity for digital twins in the built environment: Current research and future directions,” J. Inf. Technol. Constr., vol. 26, pp. 159–173, 2021, doi: 10.36680/j.itcon.2021.010.

European Union Agency for Network and Information Security (ENISA), “Recommended cryptographic measures for securing personal data,” 2013.

T. Lewis, “The future of cyber security: 2022 predictions from Darktrace - Darktrace Blog,” Darktrace Holdings Limited, Jan. 07, 2022. https://darktrace.com/blog/the-future-of-cyber-security-2022-predictions-from-darktrace (accessed Jul. 20, 2022).

S. Poremba, “Ransomware Gangs are Recruiting Your Employees - Security Boulevard,” Security Boulevard , Jan. 31, 2022. https://securityboulevard.com/2022/01/ransomware-gangs-are-recruiting-your-employees/ (accessed Jul. 20, 2022).

W. Shannon, “The Great Resignation will drive cyber attacks in 2022,” Security Brief Australia, Dec. 17, 2021. https://securitybrief.com.au/story/the-great-resignation-will-drive-cyber-attacks-in-2022 (accessed Jul. 20, 2022).

The European Parliament And The Council Of The European Union, “Regulation (Eu) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement,” Off. J. Eur. Union, vol. 61, 2018.

K. Limniotis and M. Hansen, Recommendations on shaping technology according to GDPR provisions : an overview on data pseudonymisation., 1st ed., no. November. European Union Agency for Network and Information Security, 2018. doi: 10.2824/74954.

ENISA, Data Pseudonymisation: Advanced Techniques and Use Cases, no. JANUARY. 2021. [Online]. Available: https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases

P. Štarchoň and T. Pikulík, “GDPR principles in data protection encourage pseudonymization through most popular and full-personalized devices - mobile phones,” Procedia Comput. Sci., vol. 151, no. April, pp. 303–312, 2019, doi: 10.1016/j.procs.2019.04.043.

Thomson Reuters, “Ethical wall | Practical Law,” Thomson Reuters Practical Law, 2022. https://uk.practicallaw.thomsonreuters.com/0-201-9413?contextData=(sc.Default)&transitionType=Default&firstPage=true (accessed May 05, 2023).

T. Vernon, “Data protection,” Fire Risk Manag., no. SEPTEMBER, pp. 43–44, 2009.

E. Guanabara, K. Ltda, E. Guanabara, and K. Ltda, “Introduction to the hash function as a personal data pseudonymisation technique.” European Data Protection Supervisor, p. 31, 2019.

C. Testart, “Understanding the Institutional Landscape of Cyber Security,” SSRN Electron. J., no. August, pp. 1–42, 2018, doi: 10.2139/ssrn.2756608.

S. Dzazali, A. Sulaiman, and A. H. Zolait, “Information security landscape and maturity level: Case study of Malaysian Public Service (MPS) organizations,” Gov. Inf. Q., vol. 26, no. 4, pp. 584–593, 2009, doi: 10.1016/j.giq.2009.04.004.

A. T. Tunggal, “What is Personally Identifiable Information (PII)? | UpGuard,” UpGuard, May 01, 2022. https://www.upguard.com/blog/personally-identifiable-information-pii (accessed Jul. 20, 2022).

Attivo Networks company, “Identity Threat Detection and Response (ITDR),” 2022.

Verizon, “DBIR Data Breack Investigation Report 2008-2022,” 2022.

Attivo Networks, “Improving cyber hygiene by remediating exposed credentials,” 2021.

BeyondTrust, “What is Privileged Access Management (PAM),” BeyondTrust, Jan. 22, 2021. https://www.beyondtrust.com/resources/glossary/privileged-access-management-pam (accessed Jul. 27, 2022).

Beyondtrust, “Privilege Management for desktops Multiple Deployment Options: Install Privilege Management for Windows,” 2019. [Online]. Available: https://www.beyondtrust.com/docs/privilege-management/windows/admin/install-upgrade/install-pm-windows.htm

NIST, “NISTIR 7657 A Report on the Privilege ( Access ) Management Workshop NIST IR 7657 A Report on the Privilege ( Access ) Management Workshop,” in Privilege (Access) Management Workshop, 2010, p. 48.

BeyondTrustSoftware, “Seven Steps to Complete Privileged Access Management,” 2017.

ManageEngine, “Privileged access management 101 : A comprehensive guide to building a sound PAM strategy for your enterprise,” ManageEngine. pp. 1–14, 2019.

M. W. Sanders, “Automated methods for generating least privilege access control policies,” Colorado School of Mines, 2019.

S. Ahmad, S. Mehfuz, F. Mebarek-Oudina, and J. Beg, “RSM analysis based cloud access security broker: a systematic literature review,” Cluster Comput., vol. 3, no. 6, p. 31, 2022, doi: 10.1007/s10586-022-03598-z.

Bitglass, “The Definitive Guide to Cloud Access Security Brokers.” Amazone, Silcon valley, p. 14, 2015.

C. Lawson, N. MacDonald, B. Lowans, B. Reed, and Gartner, “The Definitive Guide to Cloud Access Security Brokers.” Bitglass, 2015. [Online]. Available: https://www.crowdstrike.com/falcon/2020/wp-content/uploads/2020/10/Bitglass_WP_Definitive_Guide_to_CASB.pdf

C. Yambari, “Drawbacks of CASBs (Cloud Access Security Brokers) in the Remote World | Zluri,” zluri technologies, Mar. 02, 2022. https://www.zluri.com/blog/casb-drawbacks/ (accessed Jul. 19, 2022).

Versa Networks, “Cloud access security broker (CASB),” 2022. [Online]. Available: https://www.netskope.com/es/security-defined/what-is-casb%0Ahttps://umbrella.cisco.com/products/cloud-access-security-broker-casb

J. C. Roberts and B. Bersani, “Human Trafficking as a Cybercrime: A Rational Choice Theory Perspective,” University of Maryland, College Park, 2021.

J. Scott, “Rational Choice Theory,” no. 1920, pp. 1–15, 2000.

D. Satz and J. Ferejohn, “Rational Choice and Social Theory,” J. Philos., vol. 91, no. 2, pp. 71–87, 1994.

R. L. Akers, “Rational Choice , Deterrence , and Social Learning Theory in Criminology : The Path Not Taken Not Taken *,” J. Crim. Law Criminol., vol. 81, no. 3, p. 25, 1991.

B. McCarthy and A. Chaudhary, “Rational Choice Theory,” Encyclopedia of Criminology and Criminal Justice. Springer, New York, NY, New York, NY, pp. 4307–4315, 2014. doi: 10.1007/978-1-4614-5690-2_396.

M. Bachmann, “What Makes Them Click ? Applying The Rational Choice Perspective To The Hacking Underground,” University of Central Florida, 2008.

G. E. Higgins, “Digital Piracy , Self-Control Theory , and Rational Choice : An Examination of the Role of Value,” Int. J. Cyber Criminol., vol. 1, no. 1, pp. 33–55, 2007.

L. Irwin, “9 cyber security predictions for 2022 - IT Governance UK Blog,” IT Governance Blog, Feb. 2022.

F. Daniel, “Artificial Intelligence in Insurance – Three Trends That Matter | Emerj Artificial Intelligence Research,” emerj AI research and advisory company , Mar. 14, 2020. https://emerj.com/ai-sector-overviews/artificial-intelligence-in-insurance-trends/ (accessed Jul. 25, 2022).

G. Denise, “Catch and keep more customers with a digital insurance platform,” Majesco, Dec. 10, 2020. https://www.majesco.com/platform-technologies-that-belong-in-your-tech-portfolio/ (accessed Jul. 25, 2022).

S. Veselovská and E. Jančíková, “New Trends in Insurance Information Security Technologies,” Conf. Proc. 2nd Int. Sci. Conf. ITEMA 2018, vol. 2, no. 10, pp. 652–659, 2018, doi: 10.31410/itema.2018.652.