This paper undertakes a systematic review of the Information Systems Security literature.
The literature review consists of three parts: First, we perform topic modeling of major …

Despite the prevalence of research that exists under the label of “information security
policies”(ISPs), there is no consensus on what an ISP means or how ISPs should be …

Abstract Information privacy is increasingly important in our digitally connected world,
particularly in healthcare, and privacy regulations are ramping up to promote appropriate …

Purpose This paper aims to present empirical results exemplifying challenges related to
information security faced by small and medium enterprises (SMEs). It uses guidelines …

Due to a growing understanding that cybersecurity needs to be addressed also through
organizational measures and not by technical measures alone, cybersecurity culture is …

Background Recent statistics reveal that 56% of software attacks are caused by insider
negligence and 26% are caused by malicious insiders. They also show that 67% of …

In today's technology-centric business environment, where organizations encounter
numerous cyber threats, effective IT risk management is crucial. An objective risk …

Abstract Information security is a hot topic nowadays, and while top-class technology exists
to safeguard information assets, organizations cannot rely on technical controls alone …

Policy components – a conceptual model for modularizing and tailoring of information security
policies | Emerald Insight Books and journals Case studies Expert Briefings Open Access …

The ubiquitous use of information technology in modern life leads to many problems of
financial information security. Such security issues could be due to users' insecure …