مقاله انگلیسی رایگان در مورد امنیت شبکه مردم، فناوری و فرایندها

مقاله سال 2016

If one thing is clear, itisthat cybersecurity is more than just a technical issue. It involves unique alchemies between technologies, people, and processes–—the latter in the form of overarching regulations and laws. As such, we have divided the articles into these three sections, starting with two articles on the most important element: people.

The first article–—by Dang-Pham, Pittayachawan, and Bruno–—considers how and when security advice is shared by employees. Research supports the effi- cacy of security-centric cultures. However, more often than not, managing security is seen as a top-down exercise, where a lack of compliance is met with disciplinary action. The authors analyze some of the underlying personal and structural causes impeding security cultures, asserting they are more circular than hierarchical, and offer some practical insights for both researchers and managers who wish to develop and sustain peer-managed security cultures in their organizations. The role of Chief Information Security Officer, or CISO, is a recent creation in organizations. The second article–—by Hooper and McKissack–—outlines the responsibilities of this role, its place in the organization, and the type of leadership it demands if it is to succeed.