Proceedings

of the techniques, methods and procedures adopted in terminology work to carry out
terminology research.
We propose to start with literature review in identifying new IT threats and
vulnerabilities continue with a case study regarding information strategy for online
business and proposal to eliminate threats and vulnerabilities by using outsourcing
and cloud computing.
As we know, information strategy must be aligning to IT novelty, so the future studies
will be according to new technologies for online business to improve the economic
performance.
The next steps present the flow of the research:
� Defining the research and development of its approach
The first step in the research was the definition of the problem to study. To define
correct strategies, it was considered important the existing relevant information, and
establishes the necessary information for making decision. The definition of the
problem involved discussions with decision makers of companies, interviews with
experts in the field, secondary data analysis and qualitative research sometimes, such
as "focus group".
This technique was used to see how viable is a new software product or a new service
as proposed for implementation. We set up a group of 8-9 managers, from a company
to discuss some of the issues on which we have proposed. The group was led by us
together with an IT specialist – manager moderator at company which conducted the
interview. He started the discussion at a very general level, and then, gradually, was
focused on the subject in question, in the form of information security along the flow
of information; the participants were not told before that is the subject of the question,
but only the area of interest.
Focus group website has proven to be useful for understanding the perceptions and
behavior of the users' computer system; generating new ideas for software or
hardware products located at maturity; getting impressions, information related to the
launch of new software products; the development of concepts, new ideas in regards
to advertising for products developed in society; reactions to the change in the price of
services, obtaining preliminary reactions to specific marketing programs.
� The research plan
Research plan represented a guide for conducting research. Established procedures for
obtaining the required data and its purpose was to present a study, which give answers
on how to identify security risks, security breaches and provide information related to
their appearance for the preparation of a detailed final conclusions with
recommendations.
Research plan involved taking the following steps: analysis of secondary data,
qualitative research, quantitative methods of data collection, the definition of the
necessary information, documentation, sample proposal and setting the size of the
sample, the data analysis plan (security policy, organization, management of
information security, human resources security, physical security and the
environment, communication and management of logical operations, control of access
~ 662 ~