This review explores the problems Chief Information Security Officers (CISOs) and other
cyber professionals face when defending their organization against cyberattacks. Using a …

We review the literature on how organizations learn from information system (IS) incidents.
We identify three modes of learning depending on the practices that constitute the learning …

Owing to its multidisciplinary nature, the operations management (OM) and information
systems (IS) interface distinguishes itself from the individually focused perspective of both …

This research examines the joint effects of information technology (IT) strategies and security
investments on organizational security breaches. We focus on two forms of IT strategies …

Although cybersecurity awareness training for employees is important, it does not provide
the necessary skills training required to better protect businesses against cyber-attacks …

Cyber-security is increasingly seen as an important determinant of firm-specific financial risk.
Agency theory suggests that managers and investors have different preferences over such …

The industrial Internet of Things (IIoT) provide an opportunity for industries to build large
interconnected systems that utilize various technologies, such as personal computers …

With the nearly instantaneous dissemination of information in the modern era, policies
regarding the disclosure of sensitive information have become the focus of significant …

This study measures individual resilience to cyberterrorist attacks on financial systems and
explores the antecedents of resilience. The research model integrates the resilience …

In this survey, we review the cybersecurity information-sharing literature, categorizing the
identified papers based on their main focus and methodological approaches implemented to …