Document (#42950)

Author

Ahmad, A.
Desouza, K.C.
Maynard, S.B.
Naseer, H.
Baskerville, R.L.

Title

How integration of cyber security management and incident response enables organizational learning

Source

Journal of the Association for Information Science and Technology. 71(2020) no.8, S.939-953

Year

2020

Abstract

Digital assets of organizations are under constant threat from a wide assortment of nefarious actors. When threats materialize, the consequences can be significant. Most large organizations invest in a dedicated information security management (ISM) function to ensure that digital assets are protected. The ISM function conducts risk assessments, develops strategy, provides policies and training to define roles and guide behavior, and implements technological controls such as firewalls, antivirus, and encryption to restrict unauthorized access. Despite these protective measures, incidents (security breaches) will occur. Alongside the security management function, many organizations also retain an incident response (IR) function to mitigate damage from an attack and promptly restore digital services. However, few organizations integrate and learn from experiences of these functions in an optimal manner that enables them to not only respond to security incidents, but also proactively maneuver the threat environment. In this article we draw on organizational learning theory to develop a conceptual framework that explains how the ISM and IR functions can be better integrated. The strong integration of ISM and IR functions, in turn, creates learning opportunities that lead to organizational security benefits including: increased awareness of security risks, compilation of threat intelligence, removal of flaws in security defenses, evaluation of security defensive logic, and enhanced security response.

Content

https://asistdl.onlinelibrary.wiley.com/doi/10.1002/asi.24311.

Similar documents (author)

1. Ahmad, N.: Newspaper indexing : an international overview (1991) 1.98

   1.9845178 = sum of:
     1.9845178 = product of:
       3.9690356 = sum of:
         3.9690356 = weight(author_txt:ahmad in 3633) [ClassicSimilarity], result of:
           3.9690356 = score(doc=3633,freq=1.0), product of:
             0.68291885 = queryWeight, product of:
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.07344009 = queryNorm
             5.81187 = fieldWeight in 3633, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.625 = fieldNorm(doc=3633)
       0.5 = coord(1/2)
   

2. Ahmad, K.: Text summarisation : the role of lexical cohesion analysis (1995) 1.98

   1.9845178 = sum of:
     1.9845178 = product of:
       3.9690356 = sum of:
         3.9690356 = weight(author_txt:ahmad in 5795) [ClassicSimilarity], result of:
           3.9690356 = score(doc=5795,freq=1.0), product of:
             0.68291885 = queryWeight, product of:
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.07344009 = queryNorm
             5.81187 = fieldWeight in 5795, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.625 = fieldNorm(doc=5795)
       0.5 = coord(1/2)
   

3. Ahmad, K.: ¬A terminology dynamic and the growth of knowledge : a case study in nuclear physics and in the philosophy of science (1996) 1.98

   1.9845178 = sum of:
     1.9845178 = product of:
       3.9690356 = sum of:
         3.9690356 = weight(author_txt:ahmad in 6320) [ClassicSimilarity], result of:
           3.9690356 = score(doc=6320,freq=1.0), product of:
             0.68291885 = queryWeight, product of:
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.07344009 = queryNorm
             5.81187 = fieldWeight in 6320, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.625 = fieldNorm(doc=6320)
       0.5 = coord(1/2)
   

4. Awazu, Y.; Desouza, K.C.: Open knowledge management : lessons from the open source revolution (2004) 1.76

   1.7563725 = sum of:
     1.7563725 = product of:
       3.512745 = sum of:
         3.512745 = weight(author_txt:desouza in 2890) [ClassicSimilarity], result of:
           3.512745 = score(doc=2890,freq=1.0), product of:
             0.7304943 = queryWeight, product of:
               1.0342461 = boost
               9.617446 = idf(docFreq=7, maxDocs=44218)
               0.07344009 = queryNorm
             4.808723 = fieldWeight in 2890, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.617446 = idf(docFreq=7, maxDocs=44218)
               0.5 = fieldNorm(doc=2890)
       0.5 = coord(1/2)
   

5. Desouza, K.C.; Awazu, Y.: Maintaining knowledge management systems : a strategic imperative (2005) 1.76

   1.7563725 = sum of:
     1.7563725 = product of:
       3.512745 = sum of:
         3.512745 = weight(author_txt:desouza in 3406) [ClassicSimilarity], result of:
           3.512745 = score(doc=3406,freq=1.0), product of:
             0.7304943 = queryWeight, product of:
               1.0342461 = boost
               9.617446 = idf(docFreq=7, maxDocs=44218)
               0.07344009 = queryNorm
             4.808723 = fieldWeight in 3406, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.617446 = idf(docFreq=7, maxDocs=44218)
               0.5 = fieldNorm(doc=3406)
       0.5 = coord(1/2)
   

Similar documents (content)

1. Ho, S.M.; Kaarst-Brown, M.; Benbasat, I.: Trustworthiness attribution : inquiry into insider threat detection (2018) 0.33

   0.33221847 = sum of:
     0.33221847 = product of:
       1.0381827 = sum of:
         0.008642094 = weight(abstract_txt:that in 4040) [ClassicSimilarity], result of:
           0.008642094 = score(doc=4040,freq=2.0), product of:
             0.03301124 = queryWeight, product of:
               1.0463765 = boost
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.013314404 = queryNorm
             0.26179248 = fieldWeight in 4040, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.034160584 = weight(abstract_txt:integration in 4040) [ClassicSimilarity], result of:
           0.034160584 = score(doc=4040,freq=1.0), product of:
             0.08252762 = queryWeight, product of:
               1.1698811 = boost
               5.298292 = idf(docFreq=600, maxDocs=44218)
               0.013314404 = queryNorm
             0.41392908 = fieldWeight in 4040, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.298292 = idf(docFreq=600, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.028026385 = weight(abstract_txt:digital in 4040) [ClassicSimilarity], result of:
           0.028026385 = score(doc=4040,freq=1.0), product of:
             0.0827925 = queryWeight, product of:
               1.4351034 = boost
               4.332974 = idf(docFreq=1577, maxDocs=44218)
               0.013314404 = queryNorm
             0.33851358 = fieldWeight in 4040, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.332974 = idf(docFreq=1577, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.117948145 = weight(abstract_txt:assets in 4040) [ClassicSimilarity], result of:
           0.117948145 = score(doc=4040,freq=1.0), product of:
             0.18852831 = queryWeight, product of:
               1.7681957 = boost
               8.008008 = idf(docFreq=39, maxDocs=44218)
               0.013314404 = queryNorm
             0.6256256 = fieldWeight in 4040, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               8.008008 = idf(docFreq=39, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.11608123 = weight(abstract_txt:organizational in 4040) [ClassicSimilarity], result of:
           0.11608123 = score(doc=4040,freq=3.0), product of:
             0.14805184 = queryWeight, product of:
               1.9190867 = boost
               5.794254 = idf(docFreq=365, maxDocs=44218)
               0.013314404 = queryNorm
             0.784058 = fieldWeight in 4040, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               5.794254 = idf(docFreq=365, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.07535914 = weight(abstract_txt:organizations in 4040) [ClassicSimilarity], result of:
           0.07535914 = score(doc=4040,freq=1.0), product of:
             0.17620428 = queryWeight, product of:
               2.4174933 = boost
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.013314404 = queryNorm
             0.42768055 = fieldWeight in 4040, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.2982106 = weight(abstract_txt:threat in 4040) [ClassicSimilarity], result of:
           0.2982106 = score(doc=4040,freq=3.0), product of:
             0.27770767 = queryWeight, product of:
               2.6283405 = boost
               7.935687 = idf(docFreq=42, maxDocs=44218)
               0.013314404 = queryNorm
             1.0738292 = fieldWeight in 4040, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               7.935687 = idf(docFreq=42, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
         0.35975453 = weight(abstract_txt:security in 4040) [ClassicSimilarity], result of:
           0.35975453 = score(doc=4040,freq=1.0), product of:
             0.6780213 = queryWeight, product of:
               7.498057 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.013314404 = queryNorm
             0.5305947 = fieldWeight in 4040, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.078125 = fieldNorm(doc=4040)
       0.32 = coord(8/25)
   

2. Sebescen, N.; Vitak, J.: Securing the human : employee security vulnerability risk in organizational settings (2017) 0.22

   0.22215055 = sum of:
     0.22215055 = product of:
       1.1107527 = sum of:
         0.006110884 = weight(abstract_txt:that in 3787) [ClassicSimilarity], result of:
           0.006110884 = score(doc=3787,freq=1.0), product of:
             0.03301124 = queryWeight, product of:
               1.0463765 = boost
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.013314404 = queryNorm
             0.18511525 = fieldWeight in 3787, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.078125 = fieldNorm(doc=3787)
         0.15782754 = weight(abstract_txt:breaches in 3787) [ClassicSimilarity], result of:
           0.15782754 = score(doc=3787,freq=2.0), product of:
             0.14421742 = queryWeight, product of:
               1.0935432 = boost
               9.905128 = idf(docFreq=5, maxDocs=44218)
               0.013314404 = queryNorm
             1.0943723 = fieldWeight in 3787, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               9.905128 = idf(docFreq=5, maxDocs=44218)
               0.078125 = fieldNorm(doc=3787)
         0.06701953 = weight(abstract_txt:organizational in 3787) [ClassicSimilarity], result of:
           0.06701953 = score(doc=3787,freq=1.0), product of:
             0.14805184 = queryWeight, product of:
               1.9190867 = boost
               5.794254 = idf(docFreq=365, maxDocs=44218)
               0.013314404 = queryNorm
             0.4526761 = fieldWeight in 3787, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.794254 = idf(docFreq=365, maxDocs=44218)
               0.078125 = fieldNorm(doc=3787)
         0.07535914 = weight(abstract_txt:organizations in 3787) [ClassicSimilarity], result of:
           0.07535914 = score(doc=3787,freq=1.0), product of:
             0.17620428 = queryWeight, product of:
               2.4174933 = boost
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.013314404 = queryNorm
             0.42768055 = fieldWeight in 3787, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.078125 = fieldNorm(doc=3787)
         0.8044356 = weight(abstract_txt:security in 3787) [ClassicSimilarity], result of:
           0.8044356 = score(doc=3787,freq=5.0), product of:
             0.6780213 = queryWeight, product of:
               7.498057 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.013314404 = queryNorm
             1.186446 = fieldWeight in 3787, product of:
               2.236068 = tf(freq=5.0), with freq of:
                 5.0 = termFreq=5.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.078125 = fieldNorm(doc=3787)
       0.2 = coord(5/25)
   

3. Mathers, J.: Using the Intranet (1997) 0.18

   0.17945698 = sum of:
     0.17945698 = product of:
       0.89728487 = sum of:
         0.009777414 = weight(abstract_txt:that in 815) [ClassicSimilarity], result of:
           0.009777414 = score(doc=815,freq=1.0), product of:
             0.03301124 = queryWeight, product of:
               1.0463765 = boost
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.013314404 = queryNorm
             0.2961844 = fieldWeight in 815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.125 = fieldNorm(doc=815)
         0.08409437 = weight(abstract_txt:management in 815) [ClassicSimilarity], result of:
           0.08409437 = score(doc=815,freq=4.0), product of:
             0.0793154 = queryWeight, product of:
               1.4046446 = boost
               4.2410107 = idf(docFreq=1729, maxDocs=44218)
               0.013314404 = queryNorm
             1.0602527 = fieldWeight in 815, product of:
               2.0 = tf(freq=4.0), with freq of:
                 4.0 = termFreq=4.0
               4.2410107 = idf(docFreq=1729, maxDocs=44218)
               0.125 = fieldNorm(doc=815)
         0.107231244 = weight(abstract_txt:organizational in 815) [ClassicSimilarity], result of:
           0.107231244 = score(doc=815,freq=1.0), product of:
             0.14805184 = queryWeight, product of:
               1.9190867 = boost
               5.794254 = idf(docFreq=365, maxDocs=44218)
               0.013314404 = queryNorm
             0.7242817 = fieldWeight in 815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.794254 = idf(docFreq=365, maxDocs=44218)
               0.125 = fieldNorm(doc=815)
         0.12057462 = weight(abstract_txt:organizations in 815) [ClassicSimilarity], result of:
           0.12057462 = score(doc=815,freq=1.0), product of:
             0.17620428 = queryWeight, product of:
               2.4174933 = boost
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.013314404 = queryNorm
             0.68428886 = fieldWeight in 815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.125 = fieldNorm(doc=815)
         0.57560724 = weight(abstract_txt:security in 815) [ClassicSimilarity], result of:
           0.57560724 = score(doc=815,freq=1.0), product of:
             0.6780213 = queryWeight, product of:
               7.498057 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.013314404 = queryNorm
             0.8489516 = fieldWeight in 815, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.125 = fieldNorm(doc=815)
       0.2 = coord(5/25)
   

4. Beamsley, T.G.: Securing digital image assets in museums and libraries : a risk management approach (1999) 0.16

   0.16179822 = sum of:
     0.16179822 = product of:
       0.8089911 = sum of:
         0.07387291 = weight(abstract_txt:proactively in 842) [ClassicSimilarity], result of:
           0.07387291 = score(doc=842,freq=1.0), product of:
             0.12710695 = queryWeight, product of:
               1.0266247 = boost
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.013314404 = queryNorm
             0.581187 = fieldWeight in 842, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.298992 = idf(docFreq=10, maxDocs=44218)
               0.0625 = fieldNorm(doc=842)
         0.009777414 = weight(abstract_txt:that in 842) [ClassicSimilarity], result of:
           0.009777414 = score(doc=842,freq=4.0), product of:
             0.03301124 = queryWeight, product of:
               1.0463765 = boost
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.013314404 = queryNorm
             0.2961844 = fieldWeight in 842, product of:
               2.0 = tf(freq=4.0), with freq of:
                 4.0 = termFreq=4.0
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.0625 = fieldNorm(doc=842)
         0.06341647 = weight(abstract_txt:digital in 842) [ClassicSimilarity], result of:
           0.06341647 = score(doc=842,freq=8.0), product of:
             0.0827925 = queryWeight, product of:
               1.4351034 = boost
               4.332974 = idf(docFreq=1577, maxDocs=44218)
               0.013314404 = queryNorm
             0.7659688 = fieldWeight in 842, product of:
               2.828427 = tf(freq=8.0), with freq of:
                 8.0 = termFreq=8.0
               4.332974 = idf(docFreq=1577, maxDocs=44218)
               0.0625 = fieldNorm(doc=842)
         0.16343375 = weight(abstract_txt:assets in 842) [ClassicSimilarity], result of:
           0.16343375 = score(doc=842,freq=3.0), product of:
             0.18852831 = queryWeight, product of:
               1.7681957 = boost
               8.008008 = idf(docFreq=39, maxDocs=44218)
               0.013314404 = queryNorm
             0.8668923 = fieldWeight in 842, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               8.008008 = idf(docFreq=39, maxDocs=44218)
               0.0625 = fieldNorm(doc=842)
         0.4984905 = weight(abstract_txt:security in 842) [ClassicSimilarity], result of:
           0.4984905 = score(doc=842,freq=3.0), product of:
             0.6780213 = queryWeight, product of:
               7.498057 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.013314404 = queryNorm
             0.73521364 = fieldWeight in 842, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.0625 = fieldNorm(doc=842)
       0.2 = coord(5/25)
   

5. Xu, G.; Cao, Y.; Ren, Y.; Li, X.; Feng, Z.: Network security situation awareness based on semantic ontology and user-defined rules for Internet of Things (2017) 0.16

   0.15920837 = sum of:
     0.15920837 = product of:
       0.99505234 = sum of:
         0.06827317 = weight(abstract_txt:attack in 306) [ClassicSimilarity], result of:
           0.06827317 = score(doc=306,freq=1.0), product of:
             0.120599605 = queryWeight, product of:
               9.05783 = idf(docFreq=13, maxDocs=44218)
               0.013314404 = queryNorm
             0.56611437 = fieldWeight in 306, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.05783 = idf(docFreq=13, maxDocs=44218)
               0.0625 = fieldNorm(doc=306)
         0.0069136755 = weight(abstract_txt:that in 306) [ClassicSimilarity], result of:
           0.0069136755 = score(doc=306,freq=2.0), product of:
             0.03301124 = queryWeight, product of:
               1.0463765 = boost
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.013314404 = queryNorm
             0.20943399 = fieldWeight in 306, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               2.3694751 = idf(docFreq=11241, maxDocs=44218)
               0.0625 = fieldNorm(doc=306)
         0.05645458 = weight(abstract_txt:response in 306) [ClassicSimilarity], result of:
           0.05645458 = score(doc=306,freq=1.0), product of:
             0.15323304 = queryWeight, product of:
               1.9523779 = boost
               5.8947687 = idf(docFreq=330, maxDocs=44218)
               0.013314404 = queryNorm
             0.36842304 = fieldWeight in 306, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.8947687 = idf(docFreq=330, maxDocs=44218)
               0.0625 = fieldNorm(doc=306)
         0.8634109 = weight(abstract_txt:security in 306) [ClassicSimilarity], result of:
           0.8634109 = score(doc=306,freq=9.0), product of:
             0.6780213 = queryWeight, product of:
               7.498057 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.013314404 = queryNorm
             1.2734274 = fieldWeight in 306, product of:
               3.0 = tf(freq=9.0), with freq of:
                 9.0 = termFreq=9.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.0625 = fieldNorm(doc=306)
       0.16 = coord(4/25)