The management of information security can be conceptualized as a complex adaptive
system because the actions of both insiders and outsiders co-evolve with the organizational …

Abstract Information security risk management (ISRM) methods aim to protect organizational
information infrastructure from a range of security threats by using the most effective and cost …

Abstract Information security management has become an increasingly serious and high-
stake challenge to organizations, due to growing reliance on the Internet as the business …

To protect information systems from increasing levels of cyber threats, organizations are
compelled to institute security programs. Because information security policies are a …

This study explores ways to empower organisations to continuously improve their
information security management (ISM). Drawing upon the dynamic capabilities approach …

While technology is important, organizational and human factors also play a crucial role in
achieving information security. In this paper we develop a system dynamics model of the …

A major stream of research within the field of information systems security examines the use
of organizational policies that specify how users of information and technology resources …

Society has become utterly dependent on information systems (IS) to power everyday life.
While this seismic shift has taken place, the security of those IS and their consequential …

We finally got what we wished for: executive managers are aware of the need to protect their
organizational data. However, we still have problems; for example, database breaches …

An information security-aware culture will minimize internal threats to information assets
through the construction of appropriate information security beliefs and values that guide …