The IT ecosystem is defined by Forrester Research and others as “the network of organizations that drives the creation and delivery of information technology products and services” and includes customers, suppliers, and influencers (key stakeholders). Similarly, one can define the information security ecosystem as the network of entities that drives information security products and services, and includes information security hardware and software vendors, consultants, digital forensics experts, standardization agencies, accreditation and education facilities, academic conferences and journals, books, magazines, hackers, and their paraphernalia.
Published in Chapter:
An Integrative Framework for the Study of Information Security Management Research
John D’Arcy (University of Notre Dame, USA) and Anat Hovav (Korea University, Korea)
Copyright: © 2009
|Pages: 13
DOI: 10.4018/978-1-59904-855-0.ch006
Abstract
A number of academic studies that focus on various aspects of information security management (ISM) have emerged in recent years. This body of work ranges from the technical, economic, and behavioral aspects of ISM to the effect of industry standards, regulations, and best practices. The purpose of this chapter is to review the current state of ISM research, while providing an integrative framework for future studies. Using the proposed framework as a guide, we identify areas of depth within current ISM literature and areas where research is underdeveloped. Finally, we call for a more comprehensive approach to ISM research that considers multiple dimensions of our framework and their interrelationships.