Document (#42950)

Author

Ahmad, A.
Desouza, K.C.
Maynard, S.B.
Naseer, H.
Baskerville, R.L.

Title

How integration of cyber security management and incident response enables organizational learning

Source

Journal of the Association for Information Science and Technology. 71(2020) no.8, S.939-953

Year

2020

Abstract

Digital assets of organizations are under constant threat from a wide assortment of nefarious actors. When threats materialize, the consequences can be significant. Most large organizations invest in a dedicated information security management (ISM) function to ensure that digital assets are protected. The ISM function conducts risk assessments, develops strategy, provides policies and training to define roles and guide behavior, and implements technological controls such as firewalls, antivirus, and encryption to restrict unauthorized access. Despite these protective measures, incidents (security breaches) will occur. Alongside the security management function, many organizations also retain an incident response (IR) function to mitigate damage from an attack and promptly restore digital services. However, few organizations integrate and learn from experiences of these functions in an optimal manner that enables them to not only respond to security incidents, but also proactively maneuver the threat environment. In this article we draw on organizational learning theory to develop a conceptual framework that explains how the ISM and IR functions can be better integrated. The strong integration of ISM and IR functions, in turn, creates learning opportunities that lead to organizational security benefits including: increased awareness of security risks, compilation of threat intelligence, removal of flaws in security defenses, evaluation of security defensive logic, and enhanced security response.

Content

https://asistdl.onlinelibrary.wiley.com/doi/10.1002/asi.24311.

Similar documents (author)

1. Ahmad, N.: Newspaper indexing : an international overview (1991) 1.99

   1.9855297 = sum of:
     1.9855297 = product of:
       3.9710593 = sum of:
         3.9710593 = weight(author_txt:ahmad in 3632) [ClassicSimilarity], result of:
           3.9710593 = score(doc=3632,freq=1.0), product of:
             0.68293065 = queryWeight, product of:
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.073405206 = queryNorm
             5.814733 = fieldWeight in 3632, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.625 = fieldNorm(doc=3632)
       0.5 = coord(1/2)
   

2. Ahmad, K.: Text summarisation : the role of lexical cohesion analysis (1995) 1.99

   1.9855297 = sum of:
     1.9855297 = product of:
       3.9710593 = sum of:
         3.9710593 = weight(author_txt:ahmad in 5863) [ClassicSimilarity], result of:
           3.9710593 = score(doc=5863,freq=1.0), product of:
             0.68293065 = queryWeight, product of:
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.073405206 = queryNorm
             5.814733 = fieldWeight in 5863, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.625 = fieldNorm(doc=5863)
       0.5 = coord(1/2)
   

3. Ahmad, K.: ¬A terminology dynamic and the growth of knowledge : a case study in nuclear physics and in the philosophy of science (1996) 1.99

   1.9855297 = sum of:
     1.9855297 = product of:
       3.9710593 = sum of:
         3.9710593 = weight(author_txt:ahmad in 6388) [ClassicSimilarity], result of:
           3.9710593 = score(doc=6388,freq=1.0), product of:
             0.68293065 = queryWeight, product of:
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.073405206 = queryNorm
             5.814733 = fieldWeight in 6388, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.625 = fieldNorm(doc=6388)
       0.5 = coord(1/2)
   

4. Awazu, Y.; Desouza, K.C.: Open knowledge management : lessons from the open source revolution (2004) 1.76

   1.7571821 = sum of:
     1.7571821 = product of:
       3.5143642 = sum of:
         3.5143642 = weight(author_txt:desouza in 3890) [ClassicSimilarity], result of:
           3.5143642 = score(doc=3890,freq=1.0), product of:
             0.7304832 = queryWeight, product of:
               1.0342292 = boost
               9.622026 = idf(docFreq=7, maxDocs=44421)
               0.073405206 = queryNorm
             4.811013 = fieldWeight in 3890, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.622026 = idf(docFreq=7, maxDocs=44421)
               0.5 = fieldNorm(doc=3890)
       0.5 = coord(1/2)
   

5. Desouza, K.C.; Awazu, Y.: Maintaining knowledge management systems : a strategic imperative (2005) 1.76

   1.7571821 = sum of:
     1.7571821 = product of:
       3.5143642 = sum of:
         3.5143642 = weight(author_txt:desouza in 4406) [ClassicSimilarity], result of:
           3.5143642 = score(doc=4406,freq=1.0), product of:
             0.7304832 = queryWeight, product of:
               1.0342292 = boost
               9.622026 = idf(docFreq=7, maxDocs=44421)
               0.073405206 = queryNorm
             4.811013 = fieldWeight in 4406, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.622026 = idf(docFreq=7, maxDocs=44421)
               0.5 = fieldNorm(doc=4406)
       0.5 = coord(1/2)
   

Similar documents (content)

1. Ho, S.M.; Kaarst-Brown, M.; Benbasat, I.: Trustworthiness attribution : inquiry into insider threat detection (2018) 0.33

   0.33169875 = sum of:
     0.33169875 = product of:
       1.0365586 = sum of:
         0.008613798 = weight(abstract_txt:that in 40) [ClassicSimilarity], result of:
           0.008613798 = score(doc=40,freq=2.0), product of:
             0.032966312 = queryWeight, product of:
               1.0438437 = boost
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.013354131 = queryNorm
             0.2612909 = fieldWeight in 40, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.034141496 = weight(abstract_txt:integration in 40) [ClassicSimilarity], result of:
           0.034141496 = score(doc=40,freq=1.0), product of:
             0.082564935 = queryWeight, product of:
               1.1681083 = boost
               5.2929387 = idf(docFreq=606, maxDocs=44421)
               0.013354131 = queryNorm
             0.41351083 = fieldWeight in 40, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.2929387 = idf(docFreq=606, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.027988786 = weight(abstract_txt:digital in 40) [ClassicSimilarity], result of:
           0.027988786 = score(doc=40,freq=1.0), product of:
             0.08278667 = queryWeight, product of:
               1.4325545 = boost
               4.3274655 = idf(docFreq=1593, maxDocs=44421)
               0.013354131 = queryNorm
             0.33808324 = fieldWeight in 40, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.3274655 = idf(docFreq=1593, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.118443295 = weight(abstract_txt:assets in 40) [ClassicSimilarity], result of:
           0.118443295 = score(doc=40,freq=1.0), product of:
             0.18921153 = queryWeight, product of:
               1.7683129 = boost
               8.0125885 = idf(docFreq=39, maxDocs=44421)
               0.013354131 = queryNorm
             0.6259835 = fieldWeight in 40, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               8.0125885 = idf(docFreq=39, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.11615301 = weight(abstract_txt:organizational in 40) [ClassicSimilarity], result of:
           0.11615301 = score(doc=40,freq=3.0), product of:
             0.14823507 = queryWeight, product of:
               1.9169308 = boost
               5.790671 = idf(docFreq=368, maxDocs=44421)
               0.013354131 = queryNorm
             0.7835731 = fieldWeight in 40, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               5.790671 = idf(docFreq=368, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.07548975 = weight(abstract_txt:organizations in 40) [ClassicSimilarity], result of:
           0.07548975 = score(doc=40,freq=1.0), product of:
             0.17655334 = queryWeight, product of:
               2.4156737 = boost
               5.4729567 = idf(docFreq=506, maxDocs=44421)
               0.013354131 = queryNorm
             0.42757475 = fieldWeight in 40, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.4729567 = idf(docFreq=506, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.2943527 = weight(abstract_txt:threat in 40) [ClassicSimilarity], result of:
           0.2943527 = score(doc=40,freq=3.0), product of:
             0.27553448 = queryWeight, product of:
               2.6134784 = boost
               7.894805 = idf(docFreq=44, maxDocs=44421)
               0.013354131 = queryNorm
             1.0682971 = fieldWeight in 40, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               7.894805 = idf(docFreq=44, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
         0.36137578 = weight(abstract_txt:security in 40) [ClassicSimilarity], result of:
           0.36137578 = score(doc=40,freq=1.0), product of:
             0.6806178 = queryWeight, product of:
               7.4993215 = boost
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.013354131 = queryNorm
             0.5309526 = fieldWeight in 40, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.078125 = fieldNorm(doc=40)
       0.32 = coord(8/25)
   

2. Sebescen, N.; Vitak, J.: Securing the human : employee security vulnerability risk in organizational settings (2017) 0.22

   0.2230281 = sum of:
     0.2230281 = product of:
       1.1151404 = sum of:
         0.0060908743 = weight(abstract_txt:that in 4787) [ClassicSimilarity], result of:
           0.0060908743 = score(doc=4787,freq=1.0), product of:
             0.032966312 = queryWeight, product of:
               1.0438437 = boost
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.013354131 = queryNorm
             0.18476056 = fieldWeight in 4787, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.078125 = fieldNorm(doc=4787)
         0.15843807 = weight(abstract_txt:breaches in 4787) [ClassicSimilarity], result of:
           0.15843807 = score(doc=4787,freq=2.0), product of:
             0.14470837 = queryWeight, product of:
               1.0934958 = boost
               9.909708 = idf(docFreq=5, maxDocs=44421)
               0.013354131 = queryNorm
             1.0948784 = fieldWeight in 4787, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               9.909708 = idf(docFreq=5, maxDocs=44421)
               0.078125 = fieldNorm(doc=4787)
         0.06706098 = weight(abstract_txt:organizational in 4787) [ClassicSimilarity], result of:
           0.06706098 = score(doc=4787,freq=1.0), product of:
             0.14823507 = queryWeight, product of:
               1.9169308 = boost
               5.790671 = idf(docFreq=368, maxDocs=44421)
               0.013354131 = queryNorm
             0.45239615 = fieldWeight in 4787, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.790671 = idf(docFreq=368, maxDocs=44421)
               0.078125 = fieldNorm(doc=4787)
         0.07548975 = weight(abstract_txt:organizations in 4787) [ClassicSimilarity], result of:
           0.07548975 = score(doc=4787,freq=1.0), product of:
             0.17655334 = queryWeight, product of:
               2.4156737 = boost
               5.4729567 = idf(docFreq=506, maxDocs=44421)
               0.013354131 = queryNorm
             0.42757475 = fieldWeight in 4787, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.4729567 = idf(docFreq=506, maxDocs=44421)
               0.078125 = fieldNorm(doc=4787)
         0.80806077 = weight(abstract_txt:security in 4787) [ClassicSimilarity], result of:
           0.80806077 = score(doc=4787,freq=5.0), product of:
             0.6806178 = queryWeight, product of:
               7.4993215 = boost
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.013354131 = queryNorm
             1.187246 = fieldWeight in 4787, product of:
               2.236068 = tf(freq=5.0), with freq of:
                 5.0 = termFreq=5.0
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.078125 = fieldNorm(doc=4787)
       0.2 = coord(5/25)
   

3. Mathers, J.: Using the Intranet (1997) 0.18

   0.18005198 = sum of:
     0.18005198 = product of:
       0.9002599 = sum of:
         0.009745399 = weight(abstract_txt:that in 1815) [ClassicSimilarity], result of:
           0.009745399 = score(doc=1815,freq=1.0), product of:
             0.032966312 = queryWeight, product of:
               1.0438437 = boost
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.013354131 = queryNorm
             0.2956169 = fieldWeight in 1815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.125 = fieldNorm(doc=1815)
         0.08423211 = weight(abstract_txt:management in 1815) [ClassicSimilarity], result of:
           0.08423211 = score(doc=1815,freq=4.0), product of:
             0.07946749 = queryWeight, product of:
               1.4035429 = boost
               4.239827 = idf(docFreq=1739, maxDocs=44421)
               0.013354131 = queryNorm
             1.0599568 = fieldWeight in 1815, product of:
               2.0 = tf(freq=4.0), with freq of:
                 4.0 = termFreq=4.0
               4.239827 = idf(docFreq=1739, maxDocs=44421)
               0.125 = fieldNorm(doc=1815)
         0.10729756 = weight(abstract_txt:organizational in 1815) [ClassicSimilarity], result of:
           0.10729756 = score(doc=1815,freq=1.0), product of:
             0.14823507 = queryWeight, product of:
               1.9169308 = boost
               5.790671 = idf(docFreq=368, maxDocs=44421)
               0.013354131 = queryNorm
             0.72383386 = fieldWeight in 1815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.790671 = idf(docFreq=368, maxDocs=44421)
               0.125 = fieldNorm(doc=1815)
         0.1207836 = weight(abstract_txt:organizations in 1815) [ClassicSimilarity], result of:
           0.1207836 = score(doc=1815,freq=1.0), product of:
             0.17655334 = queryWeight, product of:
               2.4156737 = boost
               5.4729567 = idf(docFreq=506, maxDocs=44421)
               0.013354131 = queryNorm
             0.6841196 = fieldWeight in 1815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.4729567 = idf(docFreq=506, maxDocs=44421)
               0.125 = fieldNorm(doc=1815)
         0.57820123 = weight(abstract_txt:security in 1815) [ClassicSimilarity], result of:
           0.57820123 = score(doc=1815,freq=1.0), product of:
             0.6806178 = queryWeight, product of:
               7.4993215 = boost
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.013354131 = queryNorm
             0.8495241 = fieldWeight in 1815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.125 = fieldNorm(doc=1815)
       0.2 = coord(5/25)
   

4. Beamsley, T.G.: Securing digital image assets in museums and libraries : a risk management approach (1999) 0.16

   0.1624198 = sum of:
     0.1624198 = product of:
       0.812099 = sum of:
         0.07416538 = weight(abstract_txt:proactively in 967) [ClassicSimilarity], result of:
           0.07416538 = score(doc=967,freq=1.0), product of:
             0.12754735 = queryWeight, product of:
               1.0266113 = boost
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.013354131 = queryNorm
             0.5814733 = fieldWeight in 967, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.303573 = idf(docFreq=10, maxDocs=44421)
               0.0625 = fieldNorm(doc=967)
         0.009745399 = weight(abstract_txt:that in 967) [ClassicSimilarity], result of:
           0.009745399 = score(doc=967,freq=4.0), product of:
             0.032966312 = queryWeight, product of:
               1.0438437 = boost
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.013354131 = queryNorm
             0.2956169 = fieldWeight in 967, product of:
               2.0 = tf(freq=4.0), with freq of:
                 4.0 = termFreq=4.0
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.0625 = fieldNorm(doc=967)
         0.063331395 = weight(abstract_txt:digital in 967) [ClassicSimilarity], result of:
           0.063331395 = score(doc=967,freq=8.0), product of:
             0.08278667 = queryWeight, product of:
               1.4325545 = boost
               4.3274655 = idf(docFreq=1593, maxDocs=44421)
               0.013354131 = queryNorm
             0.76499504 = fieldWeight in 967, product of:
               2.828427 = tf(freq=8.0), with freq of:
                 8.0 = termFreq=8.0
               4.3274655 = idf(docFreq=1593, maxDocs=44421)
               0.0625 = fieldNorm(doc=967)
         0.16411984 = weight(abstract_txt:assets in 967) [ClassicSimilarity], result of:
           0.16411984 = score(doc=967,freq=3.0), product of:
             0.18921153 = queryWeight, product of:
               1.7683129 = boost
               8.0125885 = idf(docFreq=39, maxDocs=44421)
               0.013354131 = queryNorm
             0.8673881 = fieldWeight in 967, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               8.0125885 = idf(docFreq=39, maxDocs=44421)
               0.0625 = fieldNorm(doc=967)
         0.50073695 = weight(abstract_txt:security in 967) [ClassicSimilarity], result of:
           0.50073695 = score(doc=967,freq=3.0), product of:
             0.6806178 = queryWeight, product of:
               7.4993215 = boost
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.013354131 = queryNorm
             0.7357094 = fieldWeight in 967, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.0625 = fieldNorm(doc=967)
       0.2 = coord(5/25)
   

5. Xu, G.; Cao, Y.; Ren, Y.; Li, X.; Feng, Z.: Network security situation awareness based on semantic ontology and user-defined rules for Internet of Things (2017) 0.16

   0.1597912 = sum of:
     0.1597912 = product of:
       0.9986951 = sum of:
         0.06854615 = weight(abstract_txt:attack in 1307) [ClassicSimilarity], result of:
           0.06854615 = score(doc=1307,freq=1.0), product of:
             0.121020615 = queryWeight, product of:
               9.06241 = idf(docFreq=13, maxDocs=44421)
               0.013354131 = queryNorm
             0.56640065 = fieldWeight in 1307, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.06241 = idf(docFreq=13, maxDocs=44421)
               0.0625 = fieldNorm(doc=1307)
         0.006891038 = weight(abstract_txt:that in 1307) [ClassicSimilarity], result of:
           0.006891038 = score(doc=1307,freq=2.0), product of:
             0.032966312 = queryWeight, product of:
               1.0438437 = boost
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.013354131 = queryNorm
             0.20903271 = fieldWeight in 1307, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               2.3649352 = idf(docFreq=11344, maxDocs=44421)
               0.0625 = fieldNorm(doc=1307)
         0.05595606 = weight(abstract_txt:response in 1307) [ClassicSimilarity], result of:
           0.05595606 = score(doc=1307,freq=1.0), product of:
             0.15245527 = queryWeight, product of:
               1.9440265 = boost
               5.872522 = idf(docFreq=339, maxDocs=44421)
               0.013354131 = queryNorm
             0.36703262 = fieldWeight in 1307, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.872522 = idf(docFreq=339, maxDocs=44421)
               0.0625 = fieldNorm(doc=1307)
         0.8673018 = weight(abstract_txt:security in 1307) [ClassicSimilarity], result of:
           0.8673018 = score(doc=1307,freq=9.0), product of:
             0.6806178 = queryWeight, product of:
               7.4993215 = boost
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.013354131 = queryNorm
             1.2742862 = fieldWeight in 1307, product of:
               3.0 = tf(freq=9.0), with freq of:
                 9.0 = termFreq=9.0
               6.7961926 = idf(docFreq=134, maxDocs=44421)
               0.0625 = fieldNorm(doc=1307)
       0.16 = coord(4/25)