Data Breach Management: An Integrated Risk Model

Khan, Farhan Ali; Kim, Junghwan; Mathiassen, Lars; Moore, Robin L.

doi:10.1016/j.im.2020.103392

Cited by 38 publications

(22 citation statements)

References 76 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, in terms of managerial actions aimed directly at improving cybersecurity following breaches, research is scarce. Some of it has focused on risk models emphasizing the role of containment and recovery after a data breach ( Khan et al, 2021 ), as well as on the importance of a business continuity plan to minimize disruption ( Cerullo and Cerullo, 2004 ).…”

Section: Cybersecuritymentioning

confidence: 99%

Information security risk assessments following cybersecurity breaches: The mediating role of top management attention to cybersecurity

Shaikh

Siponen²

2023

Computers & Security

View full text Add to dashboard Cite

Section: Cybersecuritymentioning

confidence: 99%

Information security risk assessments following cybersecurity breaches: The mediating role of top management attention to cybersecurity

Shaikh

Siponen²

2023

Computers & Security

View full text Add to dashboard Cite

“…In addition, Nikkhah and Grover (2022) suggested that corrective actions represent companies' primary efforts to minimize the negative consequences of crises and attempt to prevent similar events in the future. From a risk management perspective, Khan et al (2021) proposed data breach containment as a recovery category and provided several recovery actions for emerging data breach incidents. Data breach containment refers to interventions aimed at limiting the scale and scope of a data breach immediately upon detection.…”

Section: Organizational Remedies After a Data Breachmentioning

confidence: 99%

“…In this study, financial strategies refers to the company accepting responsibility for the data breach by offering an apology and providing financial compensation (Gwebu et al ., 2018). Rather than influencing the attributions of responsibilities, functional strategies focus on implementing technical actions to minimize the severity of a data breach (Khan et al. , 2021).…”

Section: Introductionmentioning

confidence: 99%

“…For example, firms can use an incident detection and prevention system (IDPS) to identify a breach and notify appropriate personnel immediately in order to limit the scale or severity of a data breach (Khan et al ., 2021). Alternately, they adopt the advanced encryption system, which could reduce the threat of a data breach, along with secure password and authentication mechanisms (Khan et al ., 2021). Firms should be aware that the implementation of functional strategies in response to data breaches requires investments in technology and human resources, which can be costly (Tayaksi et al ., 2021).…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Functional or financial remedies? The effectiveness of recovery strategies after a data breach

Guo,

Wang,

Chen

2023

JEIM

View full text Add to dashboard Cite

PurposeThis study aims to examine the relative effectiveness of functional and financial remedies in influencing customers' negative coping responses in the event of a data breach. It also uncovers the different mediating roles played by customers' feelings of anger and fear in the process of data breach recovery. This study thus differs from the literature, which has primarily focused on the impact of financial compensation and apologies for service failures in face-to-face environments.Design/methodology/approachTwo scenario-based experiments were conducted to empirically validate the model. The authors received 302 copies of the questionnaire, of which 269 were valid.FindingsThis study finds that functional remedies are more effective than financial remedies when sensitive information has been compromised, but there is no significant difference between the effectiveness of the two remedies when nonsensitive information has been compromised. In addition, functional remedies influence negative coping behaviors directly and indirectly; the indirect effect is achieved through the reduction of fear and anger. Contrary to the authors' expectation, financial remedies do not have a direct effect on negative coping behaviors; they can indirectly affect negative coping behaviors by reducing anger but do not affect negative coping behaviors by reducing fear.Practical implicationsThis study provides key insights into how to manage customer reactions in the event of a data breach, suggesting the use of carefully designed recovery strategies. Companies must attend to customers' specific emotional responses to manage their negative coping behaviors.Originality/valueThis study extends the limited literature on data breach recovery actions by investigating the different effectiveness of functional and financial remedies in the event of a data breach. It also uncovers how functional and financial recovery strategies affect customers' negative coping behaviors by revealing the different mediating effects of fear and anger.

show abstract

“…Is the storage service provider compliant with local laws and regulations? Finally, more efforts have to be made to develop procedures to automatically detect, report, and investigate data breaches [131].…”

Section: Visibility and Transparencymentioning

confidence: 99%

The Systematic Literature Review of Privacy-Preserving Solutions in Smart Healthcare Environment

Majdoubi

Bakkali

Sadki

et al. 2022

Security and Communication Networks

View full text Add to dashboard Cite

The rapid development of the Internet of Medical Things (IoMT) technology has resulted in various advances in the smart healthcare field; it improves healthcare systems to offer more complicated real-time services and provides an efficient patient motioning system. However, despite the brilliant side of IoMT, several concerns continue to undercut its adoption. In fact, collecting, transmitting, storing, and using data in IoMT applications raises issues regarding privacy and data protection, especially with the multitude of stakeholders involved during the whole data life cycle. Motivated from these facts, this article is devoted to perform a Systematic Literature Review (SLR) of privacy-preserving solutions used in the smart healthcare ecosystem. The recent research papers disseminated between 2017 and 2021 are selected from multiple databases and a standardized SLR method is conducted. A total of 100 papers were reviewed and a critical analysis was conducted on the selected papers. Moreover, this review study attempts to highlight the limitation of the current approaches and aims to find possible solutions to them. Thus, a detailed analysis was carried out on the selected papers in terms of the privacy techniques they deployed, the data life cycle phase they addressed, the stakeholders needs they met, and the privacy principles they covered according to privacy laws and regulations. Finally, we summarize our results showing privacy-preserving trends and identifying recommendations to involve privacy principles coverage in smart healthcare applications.

show abstract

Data Breach Management: An Integrated Risk Model

Cited by 38 publications

References 76 publications

Information security risk assessments following cybersecurity breaches: The mediating role of top management attention to cybersecurity

Information security risk assessments following cybersecurity breaches: The mediating role of top management attention to cybersecurity

Functional or financial remedies? The effectiveness of recovery strategies after a data breach

The Systematic Literature Review of Privacy-Preserving Solutions in Smart Healthcare Environment

Contact Info

Product

Resources

About