By: Sameer Hinduja and Brandon Kooi

Information can be considered as an invaluable commodity for all business entities, and has brought about the development of various security architectures devoted to its protection. Corporations have tended to react to the exploitation of information security (InfoSec) vulnerabilities through the implementation of technological measures. Indeed, most security policies and procedures are highly technologically inclined, making use of hardware and software to protect and safeguard the confidentiality, integrity and availability of data. Unfortunately, these tactics have achieved limited success because of inattention to the opportunistic aspects of crime commission. Situational crime prevention can address the importance of these aspects by concentrating on the circumstances associated with a crime, and how the setting, conditions and context can be modified to preclude its manifestation. Its specific application to cyber and InfoSec in a corporate setting is advantageous in developing competent proactive strategies to reduce the presence and attractiveness of criminal possibilities for would-be offenders.

Security Journal advance online publication, 17 June 2013; doi:10.1057/sj.2013.25