Why there aren’t more information security research studies

Kotulic, Andrew G.; Clark, Jan Guynes

doi:10.1016/j.im.2003.08.001

Cited by 240 publications

(140 citation statements)

References 61 publications

Supporting

Mentioning

135

Contrasting

Unclassified

Order By: Relevance

“…For instance, the size of the organization [6,11,20,23] or the protection of an organizations financial assets [8]. Most OCs are derived from written literature in the form of books, information retrieved from the International Organization for Standardization (ISO), and other industry-related papers and publications.…”

Section: Discussion and Limitationsmentioning

confidence: 99%

“…The number of business users working with financial information [8,23] Financial Remove IT auditors found this an important factor, whilst security consultants indicated it to be very specific for financial processes. The fact that the ISFAM is focused on IS in general was decisive to agree with the latter to remove it.…”

Section: ++mentioning

confidence: 99%

“…In recent years, the fields of Customer Relationship Management (CRM) adoption [22], Knowledge Management [39], and Sourcing [28] have shown the use of OCs to cluster and segment. In the field of IS, the necessity of taking into account OCs has proven to be significant [6] and academics have identified numerous factors in a wide variety of domains, such as financial [8,23], the complexity, and scale of the IT environment [15,29,38], and to what extent businesses deal with privacy related information [14,38].…”

Section: Introductionmentioning

confidence: 99%

“…The number of transactions in the system [8,23] Financial & IT complexity Remove Although an important indicator of IT complexity through range (accessibility) and reach (connectivity) of the platform, experts agreed on its ambiguity, making it difficult to measure and requiring expert analysis. For these reasons, this would not ensure reliable information, and therefore, it should be removed.…”

mentioning

confidence: 99%

“…The number of employees in the business [6,11,20,23] General Retain Number of employees is one of the most crucial indicators of the size and complexity of the organization. In discussions with experts, number of employees was chosen above FTE, as employees, the number of weekly working hours is not related to gaining special privileges above noneemployees to access systems.…”

mentioning

confidence: 99%

See 4 more Smart Citations

Organizational Characteristics Influencing SME Information Security Maturity

Mijnhardt

Baars

Spruit

2016

Journal of Computer Information Systems

View full text Add to dashboard Cite

In the current business environment, many organizations use popular standards such as the ISO 27000x series, COBIT, and related frameworks to protect themselves against security incidents. However, these standards and frameworks are overly complicated for small to medium-sized enterprises, leaving these organizations with no easy to understand toolkit to address their security needs. This research builds upon the recent Information Security Focus Area Maturity (ISFAM) model for SME information security as a cornerstone in the development of an assessment tool for tailormade, fast, and easy-to-use information security advice for SMEs. By performing an extensive literature review and evaluating the results with security experts, we propose the Characterizing Organizations' Information Security for SMEs (CHOISS) model to relate measurable organizational characteristics in four categories through 47 parameters to help SMEs distinguish and prioritize which risks to mitigate.

show abstract

Section: Discussion and Limitationsmentioning

confidence: 99%

Section: ++mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations

Organizational Characteristics Influencing SME Information Security Maturity

Mijnhardt

Baars

Spruit

2016

Journal of Computer Information Systems

View full text Add to dashboard Cite

show abstract

Security and Privacy Issues in the Internet of Cows

Adams-Progar

Fink

Walker

et al. 2017

Security and Privacy in Cyber‐Physical Systems

View full text Add to dashboard Cite

End user nonmalicious, counterproductive computer security behaviors: concept, development, and validation of an instrument

Ifinedo

2019

Security and Privacy

View full text Add to dashboard Cite

Employees' engagement in nonmalicious, counterproductive computer security behaviors (CCSB) poses a threat to organizations' information systems (IS) resources and assets. In order to understand CCSB, there is a need to propose theoretical foundations to research the phenomenon and to offer useful tools to help organizations assess such behaviors in their particular contexts. Relevant instruments that systematically measure or assess workers' participation in CCSB remain underdeveloped. This study proposes an instrument to assess engagement in CCSB. Confirmatory factor analysis confirmed three subscales of CCSB, that is, "careless use of IS resources," "procrastinating carrying out required IS actions," and "improper use of IS resources." The instrument's relevance to research and practice is discussed and directions for future research are outlined. KEYWORDScounterproductive security behavior, employee, end user, information security, non-malicious IS behavior, scale development, validation 1 Security Privacy. 2019;2:e66.wileyonlinelibrary.com/journal/spy2

show abstract

Why there aren’t more information security research studies

Cited by 240 publications

References 61 publications

Organizational Characteristics Influencing SME Information Security Maturity

Organizational Characteristics Influencing SME Information Security Maturity

Security and Privacy Issues in the Internet of Cows

End user nonmalicious, counterproductive computer security behaviors: concept, development, and validation of an instrument

Contact Info

Product

Resources

About