[HTML][HTML] Learning from cyber security incidents: A systematic review and future research agenda

CM Patterson, JRC Nurse, VNL Franqueira - Computers & Security, 2023‏ - Elsevier
Cyber security incidents are now prevalent in many organisations. Arguably, those who can
learn from security incidents and address the underlying causes will reduce the prevalence …

[HTML][HTML] Cyber-threat perception and risk management in the Swedish financial sector

S Varga, J Brynielsson, U Franke - Computers & security, 2021‏ - Elsevier
The financial sector relies heavily on information systems for business. This study sets out to
investigate cyber situation awareness in the financial sector in Sweden, by examining what …

How do organizations learn from information system incidents? A synthesis of the past, present, and future

MHR Mehrizi, D Nicolini, JR Modol - MIS quarterly, 2022‏ - research.vu.nl
We review the literature on how organizations learn from information system (IS) incidents.
We identify three modes of learning depending on the practices that constitute the learning …

The effectiveness of abstract versus concrete fear appeals in information security

SW Schuetz, P Benjamin Lowry, DA Pienta… - Journal of …, 2020‏ - Taylor & Francis
Information security (ISec) is a pervasive concern of individuals, organizations, and
governments. To encourage individuals to engage in and learn about secure behaviors …

How can organizations develop situation awareness for incident response: A case study of management practice

A Ahmad, SB Maynard, KC Desouza, J Kotsias… - Computers & …, 2021‏ - Elsevier
Organized, sophisticated and persistent cyber-threat-actors pose a significant challenge to
large, high-value organizations. They are capable of disrupting and destroying cyber …

Integrated framework for hands-on cybersecurity training: CyTrONE

R Beuran, D Tang, C Pham, K Chinen, Y Tan… - Computers & …, 2018‏ - Elsevier
Hands-on cybersecurity education and training activities are critical given that cyberattacks
occur nowadays on an ever-increasing scale. Only such practical activities can ensure that …

Application of Bayesian network and artificial intelligence to reduce accident/incident rates in oil & gas companies

F Sattari, R Macciotta, D Kurian, L Lefsrud - Safety Science, 2021‏ - Elsevier
Process safety management (PSM) is a framework that demonstrates a company's
commitment to process safety, a better understanding of hazards and risks, a …

Agile incident response (AIR): Improving the incident response process in healthcare

Y He, ED Zamani, S Lloyd, C Luo - International Journal of Information …, 2022‏ - Elsevier
Recent industrial reports show an increased number of cybersecurity incidents, which inflict
significant financial losses. Although organisations have been increasing their investments …

[HTML][HTML] “I don't think we're there yet”: The practices and challenges of organisational learning from cyber security incidents

CM Patterson, JRC Nurse, VNL Franqueira - Computers & Security, 2024‏ - Elsevier
Learning from cyber incidents is crucial for organisations to enhance their cyber resilience
and effectively respond to evolving threats. This study employs neo-institutional and …

Impact of comprehensive information security awareness and cognitive characteristics on security incident management–an empirical study

M Thangavelu, V Krishnaswamy, M Sharma - Computers & Security, 2021‏ - Elsevier
Organizations deploy a team of dedicated security professionals and spend significant
resources safeguarding their digital assets. Despite best efforts, security incidents are on the …