The damage due to computer security incidents is motivating organizations to adopt
protective mechanisms. While technological controls are necessary, computer security also …

With the increasing organizational dependence on information systems, information systems
security has become a very critical issue in enterprise risk management. In information …

Based on a comprehensive literature survey, the constructs of the cybersecurity information
sharing ecosystem have been defined in detail. Using this ecosystem, the interrelationships …

Occupational fraud is a $652 billion problem to which disgruntled employees are a major
contributor. Much security research addresses reducing fraud opportunity and increasing …

We study the relationship between decisions made by two similar firms pertaining to
knowledge sharing and investment in information security. The analysis shows that the …

This article introduces a general approach for characterizing cyberinfrastructure resilience in
the face of multiple malicious cyberattacks, such as when a sequence of denial‐of‐service …

The complexity of the problem, the increasing security breaches, and the regulatory and
financial consequences of breached patient data highlight the fact that security of electronic …

In the new era of a ubiquitously networked world, security measures are only as good as
their weakest link. Home computers with access to the Internet are one of the weaker links …

Researchers have used the lens of social sciences to examine the characteristics of insider
threats to understand motivation and subsequently develop appropriate organizational …

To efficiently manage information security, firms typically outsource part of their security
functions to a managed security service provider (MSSP) under a variety of contractual …