Conference Proceedings

Cybersecurity Risk Management Using Analytics: A Dynamic Capabilities Approach

Humza Naseer, A Ahmad, Sean Maynard, Graeme Shanks

International Conference on Information Systems (ICIS) 2018 | AIS | Published : 2018

Abstract

The modern enterprise uses risk-driven and control-centered security management systems to protect information resources and sustain competitive advantage. Such systems have proven to be quite effective in the prevention of threats that exploit common vulnerabilities. However, they are less suited to dynamic response against threats such as Advanced Persistent Threats. The complex and dynamic nature of these threats demands a sophisticated and timely response capability to collect, process and analyze evidence to direct strategic and operational cybersecurity measures. To better understand how organizations are dealing with this new dynamic threat, we analyzed in-depth data from ten expert i..

View full abstract