Understanding enterprise cybersecurity information sharing: a theoretical model and empirical analysis
Justin Z. ZhangLakshmi GoelSteven Williamsona Department of Management,Coggin College of Business,University of North Florida,Jacksonville,FL,USAb School of Business Administration,Al Akhawayn University,Ifrane,Morocco
DOI: https://doi.org/10.1080/17517575.2024.2310844
2024-02-01
Enterprise Information Systems
Abstract:This research employs an analytical modelling approach, complemented by empirical analysis, to delve into enterprise cybersecurity information sharing strategies. Utilising a thorough cost-based analysis, we scrutinise the cybersecurity costs and security levels within enterprises, leading to the identification of three core cybersecurity strategies – risk acceptance, risk balance, and risk reduction. Additionally, we delineate four distinct information-sharing strategies: selective, balanced, extensive, and futile sharing. Supported by empirical evidence gathered from a cybersecurity forum, this investigation not only enriches scholarly discussions but also provides valuable insights. Its academic significance is accentuated by offering nuanced guidance for practitioners, facilitating the implementation of effective cybersecurity information-sharing practices.
computer science, information systems