Vasudevan, Srinidhi ORCID: 0000-0002-8584-9112 , Piazza, Anna ORCID: 0000-0002-5785-6948 and Carr, Madeline (2022) Qualitative factors in organizational cyber resilience. In: 2022 International Conference on Cyber Resilience (ICCR), Dubai, United Arab Emirates, 6th - 7th October 2022. IEEE Xplore . Institute of Electrical and Electronics Engineers (IEEE), Piscataway, New Jersey, pp. 1-5. ISBN 978-1665461221; 978-1665461238 ISSN 2473-2001 (Online) (doi:https://doi.org/10.1109/ICCR56254.2022.9995762)

Preview

PDF (AAM) 44498_PIAZZA_ Qualitative_factors_in_organizational_cyber_resilience.pdf - Accepted Version Download (228kB) | Preview

Abstract

Cyber resilience moves organizations away from efforts to guarantee security of all systems, towards an approach that acknowledges that systems are bound to fail with a focus instead on the impact of that failure on business objectives. While the work on cyber resilience is evolving, there is a lack of studies using qualitative data for investigating the concepts and themes pertaining to cyber resilience in organizations. The purpose of this study is to uncover the non-technical organizational factors that contribute to better cyber resilience. By adopting a qualitative approach of analyzing factors of organizational resilience, this paper uses primary data collected through 25 interviews at senior leadership or board-level to point out the extent to which these factors facilitate or impede cyber resilience. The study illustrates a Leximancer map of each factor that characterizes organizational cyber resilience, based on insights from cyber practitioner communities through narrative interviews. This research contributes to a better theoretical and practical understanding of how cyber resilience within organizations can be improved. The findings show that cyber strategy and skilled people play a key role in adoption of cyber culture at the management level, while communication between boards and security leadership as well as a clear reporting structure are signals for building cyber resilience.

Item Type:	Conference Proceedings
Title of Proceedings:	2022 International Conference on Cyber Resilience (ICCR), Dubai, United Arab Emirates, 6th - 7th October 2022
Uncontrolled Keywords:	socio-technical factors; qualitative data; organizational cyber resilience; Leximancer concept maps; board-leadership communication; skilled workforce
Subjects:	H Social Sciences > H Social Sciences (General) H Social Sciences > HD Industries. Land use. Labor > HD61 Risk Management Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Faculty / School / Research Centre / Research Group:	Faculty of Business
Last Modified:	19 Oct 2023 12:27
URI:	http://gala.gre.ac.uk/id/eprint/44498

Actions (login required)

View Item

Downloads