Demystifying analytical information processing capability: The case of cybersecurity incident response

2021 | Decision Support Systems | Citations: 7

Authors: Naseer, Humza; Maynard, Sean B.; Desouza, Kevin C.

Abstract: Little is known about how organizations leverage business analytics (BA) to deve ... Expand

Abstract: Little is known about how organizations leverage business analytics (BA) to develop, process, and exploit analytical information in cybersecurity incident response (CSIR). Drawing on information processing theory (IPT), we conducted a field study using a multiple case study design to answer the following research question: How do organizations exploit analytical information in the process of cybersecurity incident response by using business analytics? We developed a theoretical framework that explains how organizations respond to the dy­ namic cyber threat environment by exploiting analytical information processing capability in the CSIR process. This, in turn, leads to positive outcomes in enterprise security performance, delivering both strategic and financial benefits. Our findings contribute to the BA and cybersecurity literature by providing useful insights into BA applications and the facilitation of analytics-driven decision making in CSIR. Further, they contribute to IPT by providing new insights about analytical information needs, mechanisms to seek analytical information, and analytical information use in the process of CSIR. Collapse

Topics: IT security IT security threat analytical information system decision making malware

Methods: case study qualitative interview theory development multiple case study anomaly detection

Theories: information processing theory

Exploring vendor capabilities in the cloud environment: A case study of Alibaba Cloud Computing

2019 | Information & Management | Citations: 2

Authors: Zhang, Gongtao; Ravishankar, M. N.

Abstract: Cloud computing is being viewed as an effective enabler for enhanced operational ... Expand

Abstract: Cloud computing is being viewed as an effective enabler for enhanced operational efficiency and flexibility in competitive business environments. Despite the increased knowledge on cloud computing, very few studies have been conducted to explore vendors' capabilities for service development and delivery. This gap prevents us from developing a full understanding of the service provision process and the actions through which vendors develop cloud services and create value for clients. In this paper, we present an in-depth qualitative case study of Alibaba Cloud Computing, China’s biggest Infrastructure-as-a-Service (IaaS) vendor, and identify five important capabilities, namely, cloud platform development, cloud platform deployment, IaaS imitation, IaaS commercialization, and IaaS improvement. We suggest that these capabilities and the associated actions are central to vendors’ adoption of cloud computing, acquisition of knowledge, and delivery and improvement of their cloud service provision. This paper contributes incrementally to the evolving scholarship on cloud computing and also offers useful guidelines for current and aspiring vendors. Collapse

Topics: cloud computing infrastructure as a service competitive advantage application programming interface backup

Methods: case study qualitative interview literature study personal interview computational algorithm

Theories: dynamic capabilities theory resource based view of the firm

An assessment of opportunity-reducing techniques in information security: An insider threat perspective

2016 | Decision Support Systems | Citations: 0

Authors: Padayachee, Keshnee

Abstract: This paper presents an evaluation of extant opportunity-reducing techniques empl ... Expand

Abstract: This paper presents an evaluation of extant opportunity-reducing techniques employed to mitigate insider threats. Although both motive and opportunity are required to commit maleficence, this paper focuses on the concept of opportunity. Opportunity is more tangible than motive; hence it is more pragmatic to reflect on opportunity-reducing measures. To this end, opportunity theories from the field of criminology are considered. The exploratory evaluation proffers several areas of research and may assist organizations in implementing opportunity-reducing information security controls to mitigate insider threats. The evaluation is not definitive, but serves to inform future understanding. Collapse

Topics: data security criminality insider threat IT security defense data loss prevention system

Methods: delphi study survey personal interview

IT Security Investments Through the Lens of the Resource-Based View: A new Theoretical Model and Literature Review

2015 | European Conference On Information Systems | Citations: 0

Authors: Weishäupl, Eva; Yasasin, Emrah; Schryen, Guido

Abstract: IT security has become a major issue for organizations as they need to protect t ... Expand

Abstract: IT security has become a major issue for organizations as they need to protect their assets, including IT resources, intellectual property and business processes, against security attacks. Disruptions of ITbased business activities can easily lead to economic damage, such as loss of productivity, revenue and reputation. Organizations need to decide (1) which assets need which level of protection, (2) which technical, managerial and organizational security countermeasures lead to this protection and (3) how much should be spent on which countermeasure in the presence of budget constraints. Answering these questions requires both making IT security investment decisions and evaluating the effectiveness and efficiency of these decisions. Collapse

Topics: IT security business process management organizational productivity IT security threat competitive advantage

Methods: literature study synthesis structured literature research

Theories: resource based view of the firm