Information Security

Technology allows individuals and organizations access to more comprehensive and diverse information, but this access requires that electronic information, networks, data repositories, and data transmissions be adequately safeguarded. RAND has developed a large body of research focused on recognizing the potential threats to information security and data integrity, as well as implications for personal and institutional privacy.

Research conducted by: RAND Justice, Infrastructure, and Environment; RAND National Security Research Division; RAND Labor and Population; RAND Europe; RAND Arroyo Center; RAND Project AIR FORCE

Featured at RAND

Cybersecurity: Examining Challenges for the Future

Cyberspace is increasingly important for economic growth, openness, and democracy, but poor cybersecurity can make governments, businesses, and individuals open to cyber attack and cyber crime. RAND Europe conducts a range of research on the topic to advise policymakers.

Journal Articles (15)

Data Protection Review: Impact on EU Innovation and Competitiveness — Dec 1, 2012

This document presents a rapid assessment of the innovation and competitiveness impacts of the measures affecting: automated processing; control of data processing; and data transfers.

Give and Take: Good Practice Guide for Addressing Network and Information Security Aspects of Cybercrime — Nov 1, 2012

A snapshot of the current status of ENISAs support for CERTs and LEAs, and includes good practice and recommendations for both communities.

Incentives and Barriers of the Cyber Insurance Market in Europe — Jun 28, 2012

ENISA conducted a study identifying possible causes inhibiting the cyber-insurance market in Europe and investigating incentives to kick-start its development.

Cyber Policy: Institutional Struggle in a Transformed World — Jan 1, 2012

When it comes to cyber security, the world today is not the future that U.S. policy promised when cyber security first appeared on the national agenda well over a decade ago.

A Flair for Sharing - Encouraging Information Exchange Between CERTs — Dec 16, 2011

This study focuses on the legal and regulatory aspects of information sharing and cross-border collaboration of national/governmental CERTs in Europe.

Toward a U.S. Army Cyber Security Culture — Sep 1, 2011

This article defines and explores the concept of cyber security culture within the context of the U.S. Army.

Encryption and the Loss of Patient Data — Jan 1, 2011

Encryption is seen as a way to prevent malicious use of patient data, but there is no empirical evidence that it does.

Incentives and Challenges for Information Sharing in the Context of Network and Information Security — Sep 8, 2010

This report sets out findings from a research project into the barriers to and incentives for information sharing in the field of network and information security, in the context of peer-to-peer groups such as Information Exchanges (IE) and Information Sharing Analysis Centres (ISACs).

Security, at What Cost? — Jan 1, 2010

Much of the current debate concerning civil liberties and security is adversarial, and little robust research data informs these arguments.This paper outlines the results of a study that attempts to objectively understand the real privacy, liberty and security trade-offs made by individuals, so that policymakers can be better informed about the preferences of individuals with regard to these important issues.

Pharmacy, Facsimile, and Cyberspace: An Examination of Legal Frameworks for Electronic Prescribing — Jan 1, 2002

Are recent laws in conflict with the technological trend toward wireless transfer of physician and patient-specific health information, and will they present overwhelming barriers to the widespread use of e-prescribing?

Canada Aims to Close the USA's Electron Backdoor — Jan 1, 2002

The threat of crossborder cyberattacks into the USA is focusing attention on the electronic security of its northern neighbour.

Information Operations and Counterterrorism — Jan 1, 2002

There is an increasing awareness that TTOs and other asymmetric enemies seek to exploit Western vulnerabilities to cyberbased information operations.

The Role of Computer Use in Different Medical Specialties — Jan 1, 2001

Health-related Web sites are among the most visited sites on the Internet, and their use may change the patient-provider relationship.

Abbot and Costello Meet Frankenstein: Dueling Medical Privacy Horror Stories — Jan 1, 2001

There is increasing concern over the issue of privacy of patient records. This article discusses the government's role and basic safeguarding principles.

National security in the information age — Jan 1, 1998

National security in the information age

My RAND ?

Saved Items

Recommended