Infosec research in prominent IS journals: Findings and implications for the CIO and board of directors

Abstract

Having reviewed 91 information security (InfoSec) studies published in top IS journals for a ten-year period (2004-2014), we discuss technical, behavioral, financial, and managerial challenges for CIOs and boards of directors, and offer suggestions for future practice-relevant research on preventing, preparing for, detecting and responding to InfoSec incidents.