The role of the chief information security officer in the management of IT security

2017 ◽  
Vol 25 (3) ◽  
pp. 300-329 ◽  
Author(s):  
Erastus Karanja

Purpose The aim of this study is to advance research on the position of the CISO by investigating the role that CISOs play before and after an IT security breach. There is a dearth of academic research literature on the role of a chief information security officer (CISO) in the management of Information Technology (IT) security. The limited research literature exists despite the increasing number and complexity of IT security breaches that lead to significant erosions in business value. Design/methodology/approach The study makes use of content analysis and agency theory to explore a sample of US firms that experienced IT security breaches between 2009 and 2015 and how these firms reacted to the IT security breaches. Findings The results indicate that following the IT security breaches, a number of the impacted firms adopted a reactive plan that entailed a re-organization of the existing IT security strategy and the hiring of a CISO. Also, there is no consensus on the CISO reporting structure since most of the firms that hired a CISO for the first time had the CISO report either to the Chief Executive Officer or Chief Information Officer. Research limitations/implications The findings will inform researchers, IT educators and industry practitioners on the roles of CISOs as well as advance research on how to mitigate IT security vulnerabilities. Originality/value The need for research that advances an understanding of how to effectively manage the security of IT resources is timely and is driven by the growing frequency and sophistication of the IT security breaches as well as the significant direct and indirect costs incurred by both the affected firms and their stakeholders.

2019 ◽  
Vol 34 (7) ◽  
pp. 808-834 ◽  
Author(s):  
Elina Haapamäki ◽  
Jukka Sihvonen

Purpose This paper aims to update the cybersecurity-related accounting literature by synthesizing 39 recent theoretical and empirical studies on the topic. Furthermore, the paper provides a set of categories into which the studies fit. Design/methodology/approach This is a synthesis paper that summarizes the research literature on cybersecurity, introducing knowledge from the extant research and revealing areas requiring further examination. Findings This synthesis identifies a research framework that consists of the following research themes: cybersecurity and information sharing, cybersecurity investments, internal auditing and controls related to cybersecurity, disclosure of cybersecurity activities and security threats and security breaches. Practical implications Academics, practitioners and the public would benefit from a research framework that categorizes the research topics related to cybersecurity in the accounting field. This type of analysis is vital to enhance the understanding of the academic research on cybersecurity and can be used to support the identification of new lines for future research. Originality/value This is the first literature analysis of cybersecurity in the accounting field, and it has significant implications for research and practice by detailing, for example, the benefits of and obstacles to information sharing. This synthesis also highlights the importance of the model for cybersecurity investments. Further, the review emphasizes the role of internal auditing and controls to improve cybersecurity.


2019 ◽  
Vol 22 (1) ◽  
pp. 5-8
Author(s):  
Ian Cummins

Purpose The purpose of this paper is to discuss the recent National Appropriate Adult Network (NAAN) report on the role of the appropriate adult. Design/methodology/approach This paper is based on the NAAN report and a review of relevant policy and research literature. Findings There to Help 2 highlights that there are still significant gaps in the provision of appropriate adult schemes across England and Wales. These gaps potentially place vulnerable adults at increased risk. Originality/value This paper is a review of recent research.


2015 ◽  
Vol 43 (4) ◽  
pp. 38-46 ◽  
Author(s):  
Joseph Calandro, Jr.

Purpose – The purpose of this paper is to profile how ample cash holdings can serve as a competitive advantage by first mitigating the risk of becoming a forced seller during times of distress, and then positioning a firm to take strategic advantage of forced selling and other forms of distress-generated opportunities. Design/methodology/approach – The author reviews the changing role of cash over time in corporate strategy, and how inadequate cash has caused or contributed to corporate failures. Findings – The findings of this paper, which are supported by historical and contemporary examples, are that ample cash reserves can be a powerful source of comparative advantage. Practical implications – This article supports earlier work published in Strategy & Leadership that shows how Graham-and-Dodd-based analysis is a viable avenue of academic research and a viable method with which to assess and formulate corporate strategic initiatives such as mergers and acquisitions, share buy-backs, risk management and, in this case, the strategic uses of cash. Originality/value – This paper offers leaders and financial executives a practical explanation of how ample cash holdings can serve as a competitive advantage.


2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Hao Chen ◽  
Ofir Turel ◽  
Yufei Yuan

PurposeElectronic waste (e-waste) such as discarded computers and smartphones may contain large amounts of confidential data. Improper handling of remaining information in e-waste can, therefore, drive information security risk. This risk, however, is not always properly assessed and managed. The authors take the protection motivation theory (PMT) lens of analysis to understand intentions to protect one's discarded electronic assets.Design/methodology/approachBy applying structural equation modeling, the authors empirically tested the proposed model with survey data from 348 e-waste handling users.FindingsResults highlight that (1) protection intention is influenced by the perceived threat of discarding untreated e-waste (a threat appraisal) and self-efficacy to treat the discarded e-waste (a coping appraisal) and (2) optimism bias plays a dual-role in a direct and moderating way to reduce the perceived threat of untreated e-waste and its effect on protection intentions.Originality/valueResults support the assertions and portray a unique theoretical account of the processes that underline people's motivation to protect their data when discarding e-waste. As such, this study explains a relatively understudied information security risk behavior in the e-waste context, points to the role of optimism bias in such decisions and highlights potential interventions that can help to alleviate this information security risk behavior.


2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Lwando Mdleleni

Purpose This paper aims to explore the role of university in promoting, generating and sustaining social innovation (SI). It aimed to understand how higher education institutions have extended their contribution beyond the traditional function of teaching and research to perform in socio-economic problem-solving. It looks at the kinds of contributions which universities potentially make to SI processes, and the effects that this has on the direction and magnitude of SI, and by implication social development. This was done by drawing lessons from a SI project that the University of the Western Cape has been involved in, i.e. Zenzeleni Networks Project. Design/methodology/approach To address the research question with this framework, the author adopted an exploratory research design using a case study. This research is qualitative, exploratory and descriptive, based on a case study built with secondary data. Findings This paper submits that universities can potentially function as key role players in promoting SI initiatives and fostering social transformations. Universities contribute with different kinds of resources and inputs to foster new SI ideas. Originality/value The paper suggests that socially innovative university projects may contribute to community social sustainability maintaining social cohesion by increasing social capital and providing resources for the empowerment of the marginalised communities. In so doing, they contribute to overcome social exclusion and promote more sustainable forms of development at community level. More research is needed on how universities can build community networks with local community partners, who can use the insights of academic research to replicate interventions and move to scale.


2019 ◽  
Vol 24 (1) ◽  
pp. 13-19 ◽  
Author(s):  
Claire Bates

Purpose The purpose of this paper is to outline the work of the Supported Loving Network from its origin in academic research to the practical development of a national Network supporting relationships for people with learning disabilities. Design/methodology/approach First, the need for the Network is established through a review of the research literature. The paper goes on to critically discuss the Network’s progress to date including its limitations and difficulties encountered, concluding by considering plans for future growth and development. Findings There is evidence that having a national Network is helpful in supporting intimate relationships for people with learning disabilities. The Network is having a positive impact on professionals who support people with learning disabilities by providing a space for discussion, inspiration and to share positive practice. However, an increase in resources would enable Supported Loving to have a wider reach and possibly a greater influence on organisations that provide social care to adults with learning disabilities. Originality/value The research indicates that people with learning disabilities are still less likely to have a loving relationship. The level of interest and engagement with Supported Loving implies that the Network is of value to people with learning disabilities and the professionals who work with them.


Author(s):  
Sebastien Deschenes ◽  
Hamadou Boubacar ◽  
Miguel Rojas ◽  
Tania Morris

Purpose – The purpose of this article is to examine if certain board characteristics have an impact on the total remuneration of top management and the ratio of stock-based remuneration to total top-management remuneration. Design/methodology/approach – The study draws on data from the largest public Canadian companies, the constituents of the TSX/60 index. The study controls for firm size and profitability. Findings – The authors concludes that total remuneration of top management is directly linked to board-member total remuneration and the board average number of director-tenure years. The study also shows that the ratio of stock-based to total top-management remuneration is positively affected by the percentage of independent directors, total remuneration of board directors, the ratio of stock-based remuneration of directors to their total remuneration and the average number of tenure years of the board of directors. Practical implications – If regulators are determined to curb the excesses in top-management remuneration by means of promoting boards with certain characteristics, they should implement measures facilitating the control of directors’ remuneration and tenure, to discourage cronyistic behavior. Good corporate governance requires that the board act as a counterbalance to top management, ensuring that a substantial percentage of top-executive total compensation is variable, and not fixed. According to our findings, the boards that are the most likely to hold managerial avoidance of variable pay in check are those favoring director independence, variable director remuneration and longer director tenures. Social implications – The present article examines specifically the latter aspect, namely, the role of board characteristics (independence, size, compensation, board director ownership and tenure, etc.) in the determination of top-management compensation. This relationship is important because it allows us to further the analysis of corporate governance. If the above-mentioned traits of boards have a meaningful relationship with the compensation of the top management, one might conclude that certain practices in the composition of boards could influence good corporate governance practices. This is relevant for regulatory agencies, for investors and for corporations. Originality/value – The article adds to the extant literature in a number of ways. Firstly, it considers the role of the traits of the board in the determination of the compensation of the top-management teams, and not only of the chief executive officer, as is the focus of previous literature. Secondly, the article focuses on the power interplay between boards and managers, and, more particularly, on the ability of boards to be an effective mechanism of corporate governance. Finally, the article examines the potential impact of board traits in the determination of top-management compensation in the context of Canadian firms, a subject that has received less attention from academic research, which has mostly concentrated on analyzing the issue in the US context.


2022 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Mohammad G. Nejad

PurposeThe financial industry offers a unique setting to study innovations. Financial innovations have fueled the growth of economies, markets and societies. The financial industry has successfully become the breeding ground for innovative services, processes, business models and technologies. This study seeks to provide a holistic view of the literature on financial innovations, synthesize the research findings and offer future directions for research in light of three market developments that are disrupting the industry and opening up a new era for the financial services industry. Disruptions from within and outside the industry offer new generations of radically innovative services. Moreover, new generations of consumers differ from previous generations in their needs and wants and look for innovative ways to handle their financial needs. Finally, significant developments related to financial innovations have emerged in Asia and developing countries.Design/methodology/approachThis study systematically reviews the academic research literature on financial innovations in two phases. The first phase provides a quantitative review of 546 journal articles published between 1990 and 2018. In the second phase, the study synthesizes the extant research on financial innovations and maps them in five research areas: firms' introduction and adoption of FIs, financial innovation development, the outcomes of financial innovations, regulations and intellectual property, and consumers.FindingsThe analysis found that disciplines differ with regard to the employed research methodologies, the units of analysis, sources of data and the innovations they examined. A positive trend in the number of published articles during this period is observed. However, studies have primarily focused on the USA and Europe and less so on other parts of the world. The literature synthesis further identifies research gaps in the available research that highlight future research opportunities in light of the three market disruptions. The financial services industry is on the brink of a new era due to disruptions from within and outside the industry and the entrance of new generations of consumers. Moreover, the financial industry has successfully become the breeding ground for innovative services, processes and business models. Therefore, financial innovations offer promising opportunities for bridging the gap between research on product and service innovations.Research limitations/implicationsThe work provides a holistic and systematic overview of extant research on financial innovations and highlights future research opportunities in light of the three disruptive market developments. It helps researchers take advantage of the opportunities in studying financial innovations while maintaining industry relevance.Originality/valueThe study is the first to review and synthesize the academic research literature on financial innovations across marketing, finance and innovation disciplines. In addition, the study highlights three primary disruptive forces in the financial industry and identifies future research directions in light of these disruptive forces.


2019 ◽  
Vol 39 (9/10) ◽  
pp. 796-811
Author(s):  
Emmanuel Mastio ◽  
Kenneth Dovey

Purpose The purpose of this paper is to contribute to the understanding of the role of abstract forms of power in organizational change by exploring the role of such forms of power in the recent structural transformation of an iconic Australian Intellectual Property law firm. The research literature reflects relatively few studies on the increasing complexity of power dynamics in organizational and institutional arrangements. Design/methodology/approach The complexity of the investigated phenomena led to the adoption of three qualitative methods in order to access the specific forms of data that were perceived to be relevant to answering the research question (“How did abstract power dynamics influence the nature and outcomes of the firm’s structural transformation?”). Ethnography was used in the attempt to discern, through participation and observation, the assumptions that manifested in action and/or inaction; phenomenology in the exploration through unstructured interviews with 41 staff members and 4 clients of the firm, of their interpretation and “sense-making” of their “lived experience” of “what was going on” in the firm; and narrative enquiry in establishing a narrative of critical events, and their impact on “what was going on” in the firm, including those that had occurred over the years prior to this research initiative. Findings The research shows the effects of contradicting forms of abstract power (namely, hegemonic (ideological) power, dominant institutional logic and structural power) as the firm struggled to address challenges to its existence. The impact of these forms of power upon the partners’ apprehension and interpretation of the emerging challenges to the firm’s business performance remained inconspicuous throughout the period of transformation. However, these contradictory forms of abstract power insidiously created tensions within the organization which were poorly addressed, resulting in organizational dysfunction and destructive sectarian conflict. The results show that the inability of partners to discern the nature of the forms of power which were influencing their responses to the crisis was a consequence of under-developed collectively reflexive capabilities and an absence of collaborative problem-solving practices. This resulted in a negative outcome for the firm. Research limitations/implications The research has significant implications for collective endeavor in global business operations that are becoming increasingly complex. In particular, the complexity of power relations, as insidious ideological forces supported by ubiquitous technologies threaten to subsume agentic power in ways that domesticate and neutralize it, requires the development of sophisticated forms of collective ways of “working with power” – capabilities that include the ability to demystify the abstract forms of power that can shape the experience of social realities as “inevitable and natural.” Further research into these forms of power, and the surreptitious role they play in organizational arrangements, is an important requirement. With respect to limitations, as the research is located in the interpretivist research paradigm, the issue of interpretation is problematic. A strong effort was made to limit unwitting interpretive bias but the possibility of such bias cannot be ruled out, especially as, in some cases, the data are an interpretation of prior interpretations of events and/or experiences (as, e.g., in the interview data). Practical implications Working constructively with various forms of power is becoming a critical capability within organizations. This has implications for the relational and communicative skills that underpin effective collaboration of staff and other stakeholders. Such collaboration needs to include the collective ability to make explicit through critical dialogue the surreptitious influence of abstract forms of power upon the prevailing organizational arrangements and routines. To achieve this, these forms of power have to become demystified through constructive critique of the taken-for-granted aspects of everyday organizational life. This has important implications for leadership development practices and educational programs. Social implications Unless leaders develop the ability to make the influences of abstract forms of power more conspicuous, and develop collaborative capabilities to work with insight into their management, they run the risk of agentic power becoming subsumed and neutralized by such forms of power. This has important implications for organizational agency and, especially, for the creative agency of the individuals who work within organizations. On a broader scale, it has implications for institutional arrangements and for the critical apprehension of global ideologies. Originality/value Studies of abstract forms of power are relatively rare in the research literature. This is probably a result of the long-standing dominance of positivism, with its realist ontological assumptions and its objectivist epistemological assumptions. In exploring the influence exerted by abstract forms of power on the inability of the partners of a professional services firm to apprehend their situation more accurately, and to interpret their strategic options with greater insight, this research makes an original contribution to the understanding of the influence of abstract power dynamics in organizational change, and in organizational arrangements more generally.


2019 ◽  
Vol 25 (4) ◽  
pp. 688-706 ◽  
Author(s):  
Simon Kratzer ◽  
Patrick Lohmann ◽  
Maximilian Roeglinger ◽  
Lea Rupprecht ◽  
Michael zur Muehlen

Purpose The design and execution of business processes are important drivers of organizational performance. Organizations design their operations around cross-functional processes adopting business process management (BPM) methods, tools and systems. This often involves assigning BPM accountability to senior executives such as the chief operating officer (COO), chief information officer (CIO), or chief technology officer (CTO). Some organizations appoint a chief process officer (CPO), a phenomenon raising important questions about the skills and responsibilities of this position within the top management team. The purpose of this paper is to conduct an empirical study to explore the skills and responsibilities of CPOs and differences to other executives. Design/methodology/approach The authors conducted an exploratory content analysis of job resumes from LinkedIn.com to investigate the skills and careers of individuals appointed as COO, CIO, CTO and CPO in organizations from different industries and sizes. The content analysis was complemented with expert interviews of CPOs to obtain rich insights into their perception of the responsibilities of this position. Findings CPOs possess a unique skill set to serve as change agents. Their skills enable them to serve as integrators and influencers across managerial ranks and corporate functions. COOs, CIOs and CTOs possess more specialized skills related to their corporate function, whereas CPOs are more generalists who facilitate process-oriented strategy and execution, driving cultural change throughout the organization. These findings are consistent across industry and size. Originality/value This is the first paper to examine the CPO position in relation to other senior executive positions. Hence, it addresses an important gap in the BPM literature which can help organizations to make informed decisions whether they need a CPO position or have it become a part-time role of one of their existing C-level positions.


Sign in / Sign up

Export Citation Format

Share Document