Search

As with any other sector, the healthcare industry is also prone to cyber threats. Though the nature of threats is similar to any other industries, it does need to address sector-specifics risks along with security risks in its operating environments. Every day the Hospitals need to ensure that the information is adequately secured. Currently Chief Information Officer (CIOs) and Chief Information Security Officer (CISOs) are trying to protect their hospital Information Systems (IS) departments from security threats. It's imperative to take necessary measures to ensure risk management and business continuity. The paper addresses some of the challenges faced by healthcare organizations in the selection of a cyber-security framework by reviewing some of the common standards and frameworks that are used by healthcare organizations. The also paper highlights the advantages and disadvantages of each of the standards as: international organization for standardization (ISO)/IEC 27799, Health Insurance Portability and Accountability Act (HIPAA), HITRUST, Nation Institute of Standards and Technology (NIST) has developed the Cyber Security Framework (CSF) and General Data Protection Regulation (GDPR) and compare and the additional directives provided by this standards. [ABSTRACT FROM AUTHOR]

An organization’s ability to navigate the complex terrain of cyberspace depends heavily on the leadership. As organizations are increasingly going digital, there has been a corresponding rise in cybersecurity threats. Hence the need for a robust, efficient and effective cybersecurity leadership (Chief Information Security Officer, CISO) in the digital sphere. Leadership in cyberspace is a multifaceted and cross-functional approach, requiring vision, strategic acumen and commitment. The paper presents a thorough examination of the dynamic relationship between cybersecurity and leadership, cybersecurity leadership skills, role of CISOs, and cybersecurity challenges and solutions. [ABSTRACT FROM AUTHOR]

Semi-supervised learning offers a solution to the high cost and limited availability of manually labeled samples in supervised learning. In semi-supervised visual object detection, the use of unlabeled data can significantly enhance the performance of deep learning models. In this paper, we introduce an end-to-end framework, named CISO (Co-Iteration Semi-Supervised Learning for Object Detection), which integrates a knowledge distillation approach and a collaborative, iterative semi-supervised learning strategy. To maximize the utilization of pseudo-label data and address the scarcity of pseudo-label data due to high threshold settings, we propose a mean iteration approach where all unlabeled data is applied to each training iteration. Pseudo-label data with high confidence is extracted based on an ever-changing threshold (average intersection over union of all pseudo-labeled data). This strategy not only ensures the accuracy of the pseudo-label but also optimizes the use of unlabeled data. Subsequently, we apply a weak-strong data augmentation strategy to update the model. Lastly, we evaluate CISO using Swin Transformer model and conduct comprehensive experiments on MS-COCO. Our framework showcases impressive results, outperforms the state-of-the-art methods by 2.16 mAP and 1.54 mAP with 10% and 5% labeled data, respectively. [ABSTRACT FROM AUTHOR]

Purpose – The starting point for the considerations the authors make in this paper are the special features of family businesses in the area of management discussed in the literature. It has been established here that family businesses sometimes choose different organizational setups than nonfamily businesses. This has not yet been investigated for cybersecurity. In the context of cybersecurity, there has been little theoretical or empirical work addressing the question of whether the qualitative characteristics of family businesses have an impact on the understanding of cybersecurity and the organization of cyber risk defense in the companies. Based on theoretically founded hypotheses, a quantitative empirical study was conducted in German companies. Design/methodology/approach – The article is based on a quantitative-empirical survey of 184 companies, the results of which were analyzed using statistical-empirical methods. Findings – The article asked – based on the subjective perception of cybersecurity and cyber risks – to what extent family businesses are sensitized to the topic and what conclusions they draw from it. An interesting tension emerges: family businesses see their employees more as a security risk, but do less than nonfamily businesses in terms of both training and organizational establishment. Whether this is due to a lack of technical or managerial expertise, or whether family businesses simply think they can prevent cybersecurity with less formal methods such as trust, is open to conjecture, but cannot be demonstrated with the research approach taken here. Qualitative follow-up studies are needed here. Originality/value – This paper represents the first quantitative survey on cybersecurity with a specific focus on family businesses. It shows tension between awareness, especially of risks emanating from employees, and organizational routines that have not been implemented or established.

While many researchers have investigated soft skills for different roles related to business, engineering, healthcare and others, the soft skills needed by the chief information security officer (CISO) in a leadership position are not studied indepth. This paper describes a first study aimed at filling this gap. In this multimethod research, both the business leaders perspective as well as an analysis of CISO job ads is studied. The methodology used to capture the business leaders perspective is via a Delphi study and the jobs adds are studied using a quantitative content analysis. With an increasing threat to information security for companies, the CISO role is moving from a technical role to an executive role. This executive function is responsible for information security across all layers of an organisation. To ensure compliance with the security policy among different groups within the company, such as employees, the board, and the IT department, the CISO must be able to adopt different postures. Soft skills are thus required to be able to assume this leadership role in the organisation. We found that when business leaders were asked about the most important soft skills the top three consisted out of 'communication', 'leadership' and 'interpersonal' skills while 'courtesy' was last on the list for a CISO leadership role. [ABSTRACT FROM AUTHOR]

Cyber-security beyond the concept must be a product to be offered to modern society. We live in a complex world based on the digitization of products and services. Digitization also involves a complex system of associated risks. The road to the world of tomorrow goes through today's world and an analysis of the current situation in the contemporary economies about cyber risk insurance is only a first step that this article aims to achieve.The study aims to substantiate the need to formulate and assume policies and to support the regulation of cyber risk coverage by ensuring the need to support sectoral strategies to increase the level of maturity of companies from the perspective of protection against cyber threats. There is also a need to set up a cyber-risk reporting system, at least for critical and important infrastructures, the development and use by insurers of advisory and evaluation models based on standards and certifications recognized at the level of including the development of necessary skills for insurers to engineer these risks.

Educational entities are establishing program degree content designed to ensure information security skills are adequate and efficient for preparing students to be successful. Due to a perceived gap between academics and field knowledge, programs may not fully consider the competencies of C-Suite members. This study suggests the use of the Leavitt Diamond framework in conjunction with a DACUM approach to assist researchers in examining C-Suite skills as they relate to academic studies. This framework will assist researchers in examining C-Suite skills as they relate to academic studies. Since the Chief Information Security Officer position is new to the industry with reporting structures and roles varying widely, this study focuses on that role as a benchmark. This paper explores historical aspects of the computer science skills gap and provides survey validation results from invited faculty (n=5; 24%), who are both practitioners and academicians. A comparison between degree attainment and employment position is recorded to explore academic preparatory to job skill needs. Future curriculum designs will be discussed. [ABSTRACT FROM AUTHOR]

In the summer of 2017, an online survey was administered to European IT executives, asking them about their concerns, spending, investments, cloud usage, security, workforce, reporting relationships, and other issues of importance. A total of 276 organisations responded. Their top-five most important IT management concerns were: Alignment, Digital Transformation, Cybersecurity, Cost, and Business Agility. Similarly, their top-five largest IT investments were: Analytics, Software Development, Cloud, Cybersecurity, and ERP. The average age of the CIOs was 49, 41% reported to their CEO, and nearly two-thirds interacted with their CEO at least weekly. Almost three-quarters came from previous IT positions, but only a 16% from IT within their current organisations. On average, CIOs spend about 20% of their time interacting with members of the C-suite, about 26% with their IT employees, and about 16% with other corporate employees. IT spending was up nearly 5% over the previous year and averaged almost 7% of corporate revenues. Over two-thirds of companies reported the number of IT employees and salaries were both up and spending on Cloud also increased.This paper explores these and other findings and their implications for IT management practice. Comparisons with US -based organisations are also included. [ABSTRACT FROM AUTHOR]

The proliferation and embeddedness of Information Technology (IT) resources into many organizations’ business processes continues unabated. The security of these IT resources is essential to operational and strategic business continuity. However, as the large number of recent security breaches at various organizations illustrate, there is more that needs to be done in securing IT resources. Firms, through organizational structures, usually delegate the management and control of IT security activities and policies to the Chief Information Security Officer (CISO). Nevertheless, there seem to be a number of firms without a CISO and for the ones that do, there is little consensus regarding who the CISO should be reporting to. This exploratory study investigates the organizational security reporting structures using a dataset of all the firms that hired a CISO between 2010 and 2014. The results suggest that the number of firms hiring CISOs is increasing and that the hired CISOs are predominantly coming from outside the firm. Also, CISOs who are hired to fill newly created positions tend to report to the CEO whereas replacement hires for existing positions tend to report to the CIO. These findings have implications for both academics and practitioners. [ABSTRACT FROM AUTHOR]

This project examined instructional design considerations for information security (IS) training required by IS-related contractual and regulatory requirements. Project tasks included examination of learning theories and theorists to support formal annual IS training instructional design and development activities. IS education, training, and awareness (ISETA)-related literature was reviewed and a standardized definition of ISETA program components proposed for academic and practitioner use. An IS training module for a fictitious organization was developed using a behavioral-based learning approach with minimal cognitive need anticipated from participants. The module was deployed on an online learning portal and presented to a small review group of adult learners. This project will be of interest to IS practitioners as they are often tasked with creating ISETA programs but may not have instructional design training or context. [ABSTRACT FROM AUTHOR]

Turbulent times exacerbate many existing information risks and create new security management challenges. Discussions and interviews with chief information security officers from a broad range of large firms about how they addressed the challenges of the economic downturn provide both actionable ideas and clues for future research. [ABSTRACT FROM PUBLISHER]