Information Security Research Challenges in the Process of Digitizing Business: A Review Based on the Information Security Model of IBM

Business digitization has aggravated the existing security and privacy concerns of customers, resulting in new challenges on organizational security and privacy protection. However, our knowledge on whether information security (ISec) studies respond in a timely manner to the requirements of industry and the situational changes in security and privacy brought about by digitizing business is limited. In this study, we fully compared the match between ISec papers published in six leading information system (IS) journals in the last four years and the themes of IBM ISec capability reference model. We evaluated the practical relevance of ISec research in the IS field. Furthermore, we identified four security objects (i.e., data, human behavior, IT/IS, and business processes) in organizations and coded each paper to one or more of these security objects. By examining the interaction between security objects, we provided some suggestions for the research and industry communities.