Help
Cart
Skip main navigation
Editor's Cut Data Security
Skip main navigation

MANAGEMENT: How can managers improve the security of their organization?

The Cybersecurity Framework

National Institute of Standards and Technology

Published Online: May 2016
NIST

Mandatory Standards and Organizational Information Security

Published Online:

Information Systems Research

    Abstract
    Mandatory security standards that force firms to establish minimum levels of security controls are enforced in many domains, including information security. The information security domain is characterized by multiple intertwined security controls, not ...
Ensuring Employees' IT Compliance: Carrot or Stick?

Published Online:

Information Systems Research

    Abstract
    With reward (carrot) and punishment (stick) widely applied by organizations to regulate mandatory IT usage, it is imperative to understand how these incentives influence employee compliance behavior. Drawing upon control theory and regulatory focus theory,...
The Role of Extra-Role Behaviors and Social Controls in Information Security Policy Effectiveness

Published Online:

Information Systems Research

    Abstract
    Although most behavioral security studies focus on organizational in-role behaviors such as information security policy (ISP) compliance, the role of organizational extra-role behaviors—security behaviors that benefit organizations but are not specified ...
Optimal Policies for Security Patch Management

Published Online:

INFORMS Journal on Computing

    Abstract
    Effective patch management is critical to ensure the security of information systems that modern organizations count on today. Facing numerous patch releases from vendors, an information technology (IT) manager must weigh the costs of frequent patching ...
Research Note—Patching the Cloud: The Impact of SaaS on Patching Strategy and the Timing of Software Release

Published Online:

Information Systems Research

    Abstract
    This paper extends prior research on the software vendors’ optimal release time and patching strategy in the context of cloud computing and software as a service (SaaS). Traditionally, users are responsible for running on-premises software; by contrast, a ...
Intrusion-Detection Policies for IT Security Breaches

Published Online:

INFORMS Journal on Computing

    Abstract
    Intrusion-detection systems (IDSs) form an important component of IT security architectures, but the low proportion of hackers in the user population severely limits the usefulness of IDSs. Thus, even when the IDS is good, an intrusion signal may not ...

Get Notified on Updated Content

INFORMS site uses cookies to store information on your computer. Some are essential to make our site work; Others help us improve the user experience. By using this site, you consent to the placement of these cookies. Please read our Privacy Statement to learn more.
Agree