國立虎尾科技大學 |

US-Based, Medium-Sized Organizations' Cybersecurity Investment.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	US-Based, Medium-Sized Organizations' Cybersecurity Investment./
Author:	Katibai, Javad.
Description:	1 online resource (167 pages)
Notes:	Source: Dissertations Abstracts International, Volume: 85-04, Section: B.
Contained By:	Dissertations Abstracts International85-04B.
Subject:	Information technology. -
Online resource:	click for full text (PQDT)
ISBN:	9798380588058

US-Based, Medium-Sized Organizations' Cybersecurity Investment.
Katibai, Javad.

US-Based, Medium-Sized Organizations' Cybersecurity Investment. - 1 online resource (167 pages)

Source: Dissertations Abstracts International, Volume: 85-04, Section: B.

Thesis (Ph.D.)--Northcentral University, 2023.

Includes bibliographical references

This research presented on the topic of US-based medium-sized organizational cybersecurity investment. Organizational cybersecurity investment has increased due to an increase in cybersecurity attacks; however, many organizations continue underinvesting in cybersecurity. This quantitative, non-experimental, cross-sectional, exploratory research study aimed to identify some of the reasons why organizations underinvest in cybersecurity. The Gordon-Loeb model, as a risk-based framework and methodology based on the fundamental economic principle of cost-benefit analysis, was utilized for this study to examine organizational cybersecurity investment. The sample was comprised of 171 survey participants who held a senior management IT position in US-based medium-sized organizations. The collected data was analyzed using the ordinal logistic regression analysis, Spearman rank correlation coefficient, and ꭓ2 Test of Independence. The results of this research identified the following attributes as contributors to or indication of cybersecurity underinvestment: lack of support of organization's leadership, organization not having an established and documented information security policy, organization not providing its employees with awareness education and training, organization's inability to detect anomalous cybersecurity activity promptly, organizational data records that are not managed consistently to protect the confidentiality, integrity, and availability of information, organizational cybersecurity response processes and procedures that are not executed. Furthermore, the results of this study revealed that there is a dependency between organizational cybersecurity investment level and organization not having been ISO27001/NIST or other information security standard certified. Future research may expand on this research by employing mixed methods of data analytics combining quantitative and qualitative methodologies.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798380588058Subjects--Topical Terms:

559429
Information technology.
Subjects--Index Terms:

Cybersecurity investmentIndex Terms--Genre/Form:

554714
Electronic books.

US-Based, Medium-Sized Organizations' Cybersecurity Investment.
LDR:03323ntm a22003977 4500 001 1143835
005 20240517105005.5
006 m o d
007 cr mn ---uuuuu
008 250605s2023 xx obm 000 0 eng d
020 $a 9798380588058
035 $a (MiAaPQ)AAI30573731
035 $a AAI30573731
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Katibai, Javad. $3 1468636
245 1 0 $a US-Based, Medium-Sized Organizations' Cybersecurity Investment.
264 0 $c 2023
300 $a 1 online resource (167 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 85-04, Section: B.
500 $a Advisor: Schweigert, Chris J.
502 $a Thesis (Ph.D.)--Northcentral University, 2023.
504 $a Includes bibliographical references
520 $a This research presented on the topic of US-based medium-sized organizational cybersecurity investment. Organizational cybersecurity investment has increased due to an increase in cybersecurity attacks; however, many organizations continue underinvesting in cybersecurity. This quantitative, non-experimental, cross-sectional, exploratory research study aimed to identify some of the reasons why organizations underinvest in cybersecurity. The Gordon-Loeb model, as a risk-based framework and methodology based on the fundamental economic principle of cost-benefit analysis, was utilized for this study to examine organizational cybersecurity investment. The sample was comprised of 171 survey participants who held a senior management IT position in US-based medium-sized organizations. The collected data was analyzed using the ordinal logistic regression analysis, Spearman rank correlation coefficient, and ꭓ2 Test of Independence. The results of this research identified the following attributes as contributors to or indication of cybersecurity underinvestment: lack of support of organization's leadership, organization not having an established and documented information security policy, organization not providing its employees with awareness education and training, organization's inability to detect anomalous cybersecurity activity promptly, organizational data records that are not managed consistently to protect the confidentiality, integrity, and availability of information, organizational cybersecurity response processes and procedures that are not executed. Furthermore, the results of this study revealed that there is a dependency between organizational cybersecurity investment level and organization not having been ISO27001/NIST or other information security standard certified. Future research may expand on this research by employing mixed methods of data analytics combining quantitative and qualitative methodologies.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Information technology. $3 559429
650 4 $a Information science. $3 561178
650 4 $a Statistics. $3 556824
653 $a Cybersecurity investment
653 $a Gordon-Loeb model
653 $a ISO27001
653 $a Survey participants
653 $a Information security
655 7 $a Electronic books. $2 local $3 554714
690 $a 0489
690 $a 0723
690 $a 0463
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a Northcentral University. $b School of Technology. $3 1466151
773 0 $t Dissertations Abstracts International $g 85-04B.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=30573731 $z click for full text (PQDT)