Search

A theoretical framework and research strategy is proposed to gain insight into perceptions and decisions as to how SMBs make decisions regarding cybersecurity hygiene measures, which could lead to betterinformed decisions regarding insurance as part of an ISA program, as well as have a bearing on policy structures and pricing for such insurance. This is because the definition of “cybersecurity hygiene habits”(CHH) as a task appears to vary within the industry and makes the practice hard to measure and evaluate. Research suggests that there may be a poorly understood connection between CHHs undertaken by organizations and their perceptions and/or adoption of cybersecurity insurance as well, thus leading to gaps or holes within business security perimeters. Homeostatic Risk Theory (HRT) has been observed in other venues in which the use of risk mitigation measures (including insurance) leads to more risky behavior; this may have a bearing on why so many organizations, particularly Small and Medium Businesses (SMBs) are very slow to adopt Information Security Assurance (ISA) measures at all or do so minimally. This paper presents a theoretical framework and proposed research, which will provide greater clarity on these issues while highlighting areas where further research is required. [ABSTRACT FROM AUTHOR]

Issues associated with information security are numerous and diverse. Since the majority of organizational actions rely greatly on information and communication technologies, Information Systems (IS) security is now a main concern for firms, governments, institutes, and society as a whole. As a result, a plethora of graduate programs have been created, covering nearly every aspect of IS security. The authors review the current state of the IS industry presented in the literature, and identify a panel of IS experts in which to explore current job skill needs using a "Developing a Curriculum," DACUM, process to support curriculum design for two graduate degrees in IS and Information Security and Assurance (ISA) through the eyes of a university that has a unique relationship with Microsoft and an active Industry Advisory Board (IAB). [ABSTRACT FROM AUTHOR]