A framework for ID fraud prevention policies in E-tailing sector. Issue 109 (October 2021)

• Record Type: Journal Article
• Authors: Soomro, Zahoor Ahmed; Shah, Mahmood Hussain; Thatcher, Jason
• Is Part Of: Computers & security. Issue 109(2021)
• Publication Date: 2021-10
• Subjects: E-Tailing -- Identity fraud -- Policymaking -- Interviews -- Holistic approach, Case-study approach -- UK organisations; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2021.102403
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Identity fraud could lead to loss of revenue, causes operational problems to e-tailers and damages the firm's reputation. Most research in this domain focuses on the security technologies or system users' security compliance related issues. In this research, we direct attention to understanding the content and breadth of identity fraud prevention policies. We conducted thirty-three semi-structured interviews with employees and management of three large UK based e-tailers. It was found that while e-tailers have policies and other related arrangements that address information security and data theft prevention, they often lack policies on identity fraud prevention. Additionally, we found that the design of security policy awareness strategies, approaches to updating security policies, and enforcement of security compliance/audits, do not help prevent identity fraud. Based on this analysis, we developed the Identity Fraud Prevention Framework (IFPF) to help e-tailers develop and implement better identity fraud prevention practices.