A MATURITY FRAMEWORK FOR CYBERSECURITY GOVERNANCE IN ORGANIZATIONS
- 12 May 2021
- journal article
- research article
- Published by Taylor & Francis in EDPACS
- Vol. 63 (6) , 1-22
Abstract
Digitalization necessarily leads organizations to rethink their cybersecurity principles in order to counter all the risks inherent in cybercrime. Cybersecurity governance brings together all the essential elements of cyber defense and effective risk management. Without such governance, dangerous gaps persist, and assets are inevitably compromised. Given the critical decisions that need to be made in an ever-changing cyber threat environment, cybersecurity standards are a critical way for companies to ensure that their security strategy and policies are consistently and measurably implemented. The aim of this paper is to propose a capability maturity framework to assess and improve cybersecurity governance in organizations. The finding will help organizations to evaluate their cybersecurity governance capabilities.Keywords
This publication has 29 references indexed in Scilit:
- Perceived significance of information security governance to predict the information security service quality in software service industryInformation Management & Computer Security, 2014
- Building a Maturity Model of Information Security Governance for Technological Colleges and Universities in TaiwanApplied Mechanics and Materials, 2013
- Information governance: information security and access within a UK contextRecords Management Journal, 2010
- Information security: The moving targetComputers & Security, 2009
- Information Security governance: COBIT or ISO 17799 or both?Computers & Security, 2005
- Design research: A socially responsible approach to instructional technology research in higher educationJournal of Computing in Higher Education, 2005
- Applying information security governanceComputers & Security, 2003
- Information Security GovernanceInformation Security Technical Report, 2001
- Corporate information security managementNew Library World, 1999
- Security concerns of system usersInformation & Management, 1991