Big data is a fairly new innovation to the way that data is stored and used within busi-ness process. This is totally different of what we used to as data warehousing. This type of data collection is becoming a main component within the business world. Therefore there are a lot of security and privacy concerns, which has not been solved yet, the res-ulting privacy concerns need to be solved, and privacy and security risk management should be of high priority in this new generation of the business world.
Big data privacy is now a hot topic, which makes for big discussions between CISO2[40]teams, social media providers such as Facebook and Twitter, big data analytic providers, and business corporations.
In the table of risk management we mention some major privacy risks and threats over the big data processing. We obviously can realize that the impact of big data as an in-teractive component in the social business is very broad. The risk factor falls on, and impacts, both the consumer and the business.
Dirty data and manipulating data are unreliable data, as we mentioned, and negatively impact business decisions. This should be pursued as an entirely separate topic of study and research, since it is too vast to examine in this paper. For the sake of this paper, how-ever, these threats demonstrate the high-risk potential of the aspect of privacy. We will examine and study how the privacy aspect impacts consumers and, accordingly, business progress.
2Chief information security officer, https://www.eccouncil.org/ciso
Risk Statement Description Private and sensitive information
leverage for both company and
consumer • Identify telephone number and geographic location for social network users
• Assets and sensitive information for corporation Manipulated data
• Wrong business decision based on manipulated data
• Damaged reputation Abuse of data collection
• Selling data to the intruder and enemies Dirty data
• Unreal or unreliable information
• Low Quality or accuracy
This type of data generate false values, which can create disaster for both businesses and customers
Lack of knowledge of privacy
agreement in social media Such agreements on Facebook, Google, etc. often go un-read, and are sometimes signed by users with insufficient knowledge or concern
use of datasets from untrusted
parties untrusted parties that can misuse data or manipulate data Table 1: Risk statement of big data[13][14][15]
4.2.1 Data privacy management on customer side
The fast growth of technology and the role of the Internet in our life have cultivated con-cern about personal privacy. This concon-cern is growing rapidly, given that life is becoming more and more dependent on the Internet and on electronic transactions. Credit cards, Smart Phones, online banking, email, instant messengers, and GPS satellite are a few examples. Marketers enthusiastically use these avenues to target new customers, thereby contributing to the big data and social media analytic[41].
The birth of big data analytic created privacy and data protection concerns, as more people began using social media and the Internet. The fact that companies collect and utilize users’ personal information is understandably disconcerting. What’s more worri-some is the fact that many users are unaware of the fact that there are laws about privacy and data protection. This huge issue of online privacy[42] and data collection needs to be thoroughly examined and investigated. The impacts of this concern on social business and business processes will be examined in the next chapter.
According to a recent research survey, Germany has the highest level of data and pri-vacy protection in the world. The graph below "User confidence on their data pripri-vacy,"
compares the confidence level of individuals within various countries. This graph is valu-ated by the report presented by Warwick Ashford[42].
This graph shows that most users who feel they can trust the social media regarding the privacy of their personal data are from Germany. Most countries do not have a privacy policy for companies who collect user data. Consequently, this leaves users dissatisfied, and reduces the reputation of social businesses.
Figure 8: User confidence on their data privacy
A good example of the privacy risk to users is Google. This company anonymously collects user data, and according to recently published news, Google collects data and images sent over wi-fi networks using its street-view cars. This has instigated a new in-vestigation on Google’s activation by ICO3[43].
4.2.2 Big data risk management on business process
This paper does not evaluate how big data tools and companies such as Hadoop4[44]collect data; rather this paper is concerned with how such data storage impacts the safety, busi-nesses performance, user trust and privacy expectations. Furthermore, we examine what might happen in the event that unreliable and unreal data is collected, since the collec-tion of bad data leads to bad analytic, bad business decisions and ultimately business disaster.
Year by year businesses get more engaged with big data and social analytic. However, the question lies in how much they actually trust this technology, and how aware they are of security and privacy risk.
Data leakage and data protection has always been an issue for business corporations, but now big data and its features carries more specific concerns. As long as business cor-porations are aware of the risk posed by big data they can mitigate the rate of security threats, since customer data and all such sensitive data within the business platform are considered assets.
Here we mention some points that indicate weaknesses in business enterprises in hopes that data collection can become better managed:
• Lack of awareness on data processing within a company
• Lack of knowledge and awareness concerning data processing and the value of the data collected by big data providers.
With respect to data quality, businesses aim to have a data management officer or a DMO in their organization who can deal with data quality, potential risk, data security, etc. Such specificity, however, is beyond the scope of this paper.
3Information Security Officer
4www.hadoop.org