Running Head: EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c 1
Research Report #2: Emerging Issues Risk Analysis & Report
May 3,2022
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 2
1. Introduction/ Overview
Event management systems are software that helps organizers in planning, executing, and
reporting events. Such innovative solutions aid in managing an event by using a single system
since most of the manual management tasks are automated. It serves the functionality of an
event manager and synchronizes the diverse activities that need to be conducted to make the
event a success (Vetal & Kshirsagar, 2021). Even though the emergence of event management
systems has simplified the process of managing and organizing events, it has also given rise to
a host of security and privacy concerns.
Cybersecurity is considered to be one of the major concerns in the domain of event
management systems. While implementing innovative event management software, privacy and
security aspects are considered to be vital. Since all the sensitive information relating to
customers, clients, and other stakeholders is available online, it is imperative to deploy a robust
and well-functional cybersecurity framework in place. Florendo has argued that developers must
ensure the system is backed by high security so that violations by intruders can be avoided and
the privacy of diverse stakeholders can be maintained (Florendo et al., 2021). The company
must work on the event management system capacity so that it can handle diverse programs,
including ‘kids programs’ and associated child-only events.
2. Analysis
Use Case
The use case that has been selected involves ‘Purchases by attendees (adults) at trade
shows. Certain kinds of events such as trade shows can act as major hubs that can expose adults
to illegal substances such as drugs and other addictive substances. Thus, it becomes essential to
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 3
keep tracking the purchase behavior of attendees so that any kind of suspicious element can be
identified and necessary actions can be taken. The use of RFID wristbands can play an
instrumental role by giving an insight into how the attendees have been behaving throughout
trade show events, especially when it comes to purchasing something. Yamin has identified
RFID wristbands that can aid in having a better degree of control over large and crowded events
(Yamin, 2015).
Five personal information
While using the RFID wristbands on adult attendees who have come for the trade show,
a diverse range of data will be gathered, stored, processed, and transmitted. One of the most
basic personal information that is captured involves individual information like name, age, and
social security number. This information will be used to give access to the attendees of the trade
shows. Another sensitive type of information that will be in possession of Padgett-Beale, Inc. is
the sensitive credit card or debit card information that will be used by the attendees to make
purchases and pay for products such as drinks and food items. The third kind of personal
information that will be collected and processed involves the social media credentials of the
attendees. Since the attendees can have the option to make social media posts using their RFID
wristbands, their credentials will also be collected and processed. The duration of time that the
attendees will stay at the event will also be captured by using the RFID technology. Ultimately,
the exact location of the attendees will also be collected in order to keep a check on the
movement and overall behavior of the attendees while attending the event.
Five compliance issues
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 4
A number of compliance issues might arise while using the RFID technology since a
diverse range of sensitive and confidential information will be captured by it. A major
compliance issue is compromise of privacy of the attendees due to exposure of sensitive
individual information like name, age and other details to unauthorized parties. The second
serious compliance issue involves the compromise of confidential credit card or debit card
information of the attendees of the trade shows. Compliance issues could also arise in case the
social media passwords and credentials of users get compromised due to malicious actions by
online hackers or cybercriminals. Another major compliance issue may arise since the exact
location of attendees may be disclosed, which would mean that they are under constant
surveillance while attending an event. In case the sensitive medical information of users is
accessed by cyberattacks, it may lead to (Health Insurance Portability and Accountability Act)
HIPAA-related compliance issues. Such compliance issues can put attendees at risk while
attending the event.
Five privacy or security issues
A broad range of privacy or security issues may arise relating to the specific use case
involving attendees attending the trade shows. One of the most common issues is RFID
Sniffing. It involves the request by a fake RFID reader or attacker in which he may use his
reader for his purposes. Another security issue is tracking, in which an attacker may use
information that is received from an RFID tag to track the movement or location of an
individual. Spoofing is another serious issue that arises when a cybercriminal acts as the
legitimate user of a system. In case the attacker is successful in impersonating the legitimate
user, then he can spoof his credentials and manipulate the RFID data as per his liking (El
Beqqal & Azizi, 2017). For instance, he could respond to invalid requests, change the RFID id
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 5
of the legitimate user, deny normal service and write malicious codes. ‘Insert attacks’ is another
security concern in which an attacker makes an attempt to insert system commands into an
RFID system instead of sending across normal data. Virus attack is also another major serious
concern that arises in the context of RFID technology. In such a security issue, the backend
database is mainly targeted by online attackers or cybercriminals. Such a security issue has the
potential to disclose or destroy the tags data that are stored in the database, and it could disrupt
the entire service.
Laws, regulations or standards impacting the event management system
A number of laws, regulations or standards have come into existence that could have an
impact on the planned event management system using the RFID technology. One of the
fundamental laws that are likely to play an instrumental role in the use case is the Health
Insurance Portability and Accountability Act. Based on the HIPAA Act, the privacy of patients
or the medical records of individuals must be maintained. So, while the adults make purchases
in the trade shows, their medical records or other health-related information must be securely
handled so that it would not be at risk while deploying the RFID technology in the event
management context (Rachida et al., 2010).
The Fair Credit Reporting Act is another important legislative instrument that could
impact the event management system with RFID technology. As per the law, it is essential to
lay emphasis on the accuracy, fairness, as well as privacy of information that has been stored in
consumer credit bureau files (Experian, 2022). Thus, the financial information that has been
collected must be used securely so that the privacy of the attendees would not get compromised.
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 6
Washington has introduced HB 1031 (The Electronic Bill of Rights), which governs how
companies need to deploy the Radio Frequency Identification (RFID) technology and retain the
personal customer information (Are there laws governing the use of RFID? RFID JOURNAL,
2020). Even though the bill was halted, it has shed light on the importance of security while
deploying the RFID technology in a specific context.
3. Recommendations
It is critical to implement a number of best practices relating to security and privacy by the
company so that the RFID technology can be effectively implemented. A number of strategies
have been designed by focusing on elements such as people, processes, policies, and
technologies.
• The employees responsible for using the RFID technology must be trained so that they
can have a comprehensive insight into how to handle and process sensitive customer
information.
• Stringent policies must be introduced by the organization relating to the RFID
technology so that streamlined workflow processes can be adopted. Consistency and
uniformity of policies are integral to ensure that gaps in the RFID technology can be
reduced.
• The three key elements upon which the process of RFID technology must be based upon
include the reader, tag and management software. These elements must serve as core
pillars that can help to effectively manage the follow of sensitive data and information
and minimize security concerns.
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 7
• In RFID technology, effective cybersecurity tools and technologies must be integrated,
which would help to identify malicious elements and take stringent measures against
them. The role of such security tools will be critical to increasing the overall
effectiveness of the technology in the event management system.
• The policies that the company has in place relating to the RFID technology must be
regularly updated by taking into account the relevant laws and standards. Such an
approach will ensure that effective policies are adopted that can guide the organization
and its personnel to deploy RFID while managing events. c c
4. Summary
The use case that has been taken into consideration involves adult attendees at trade shows.
The RFID technology can play an instrumental role in tracking their activities and behavior
throughout the event. However, while using the RFID technology, diverse personal information
such as payment details, personal information, social media credentials, etc., will be collected
and processed. It could increase the security and privacy risks and compromise the effectiveness
of the innovative technology in the event management context. It is imperative to ensure that
proper compliance is in place so that the risks that may arise while using Radio Frequency
Identification (RFID) technology for the event management activity can be controlled to a
considerable extent. There is an opportunity for the organization to implement best practices so
that while using event management system, RFID wristbands can be strategically and safety
used without compromising the security of the customers or other stakeholders.
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 8
References
Are there laws governing the use of RFID? RFID JOURNAL. (2020, March 30). Retrieved May
3, 2022, from https://www.rfidjournal.com/faq/are-there-laws-governing-the-use-of-rfid
El Beqqal, M., & Azizi, M. (2017). Review on security issues in RFID systems. Advances in
Science, Technology and Engineering Systems Journal, 2(6), 194-202.
Experian. (2022, January 11). Understanding the fair credit reporting act. Experian. Retrieved
May 3, 2022, from https://www.experian.com/blogs/ask-experian/credit-education/report-
basics/fair-credit-reporting-act-
fcra/#:~:text=The%20Fair%20Credit%20Reporting%20Act%20(FCRA)%20is%20a%20fe
deral%20law,collect%20in%20your%20consumer%20reports.
Florendo, J., Salting, R. J., Ballongay, R., Dionson, D. M., Imperial, M. C., & Concepcion, E.
(2021). Event management system. Ascendens Asia Singapore – Bestlink College of the
EVENT MANAGEMENT c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c c
c c c c c c c c c c 9
Philippines Journal of Multidisciplinary Research. Retrieved May 3, 2022, from
https://ojs.aaresearchindex.com/index.php/aasgbcpjmra/article/view/2427
Rachida, P., Chao-Hsien, C., & Heng, X. (2010). RFID privacy issues in healthcare: Exploring
the roles of technologies and regulations. Journal of Information Privacy and Security,
6(3), 3-28.
Vetal, I., & Kshirsagar, S. (2021). Event Management System. Retrieved May 3, 2022, from
http://journalstd.com/
Yamin, M. (2015). Health management in crowded events: Hajj and Kumbh. BVICA M's
International Journal of Information Technology, 7(1), 791.
