This study investigated the integration readiness of four predominant cybersecurity
Governance, Risk and Compliance (GRC) frameworks–NIST CSF 2.0, COBIT 2019, ISO …

In order to handle their regulatory and legal responsibilities and to retain trustworthy
strategic partnerships, enterprises need to be dedicated to guaranteeing the privacy …

In the light of digitalization and recent EU policy initiatives, information is an important asset
that organizations of all sizes and from all sectors should secure. However, in order to …

Although protecting information is the key challenge in a business environment
characterized by increasing digitalization and connectivity, the impact of firms' investments in …

Organizations must be committed to ensuring the confidentiality, availability, and integrity of
the information in their possession to manage legal and regulatory obligations and to …

Despite the growing dependence of companies on information technology and the
increasingly negative impact of security incidents worldwide, there is little research on the …

Although digital transformation is geared to achieving strategic goals such as efficiency or
competitive advantages, it involves digital threats. IT security is an overarching task for …

Given the importance of auditors' assessing business risks and evaluating internal controls,
we investigate whether an audit firm's industry expertise, tenure, and size can help its …

Governments around the world routinely regulate the activities of private enterprises to guide
the behaviour of individuals and organisations towards acceptable norms. This holds true in …

This study uses analytical models to investigate whether requiring cybersecurity assurance
or a particular maturity level for vendors or contractors will help them improve their …