Corporate Information Security Investment Decisions: A Qualitative Data Analysis Approach

Daniel Schatz and Rabih Bashroush
Additional contact information
Daniel Schatz: University of East London, London, UK
Rabih Bashroush: University of East London, London, UK

International Journal of Enterprise Information Systems (IJEIS), 2018, vol. 14, issue 2, 1-20

Abstract: This article describes how with information security steadily moving up on board room agendas, security programs are found to be under increasing scrutiny by practitioners. This level of attention by senior business leaders is new to many security professionals as their field has been of limited interest to non-executive directors so far. Currently, they have to regularly report on efficiency and value of their security capabilities whilst being measured against business priorities. Based on the Grounded Theory approach, the authors analysed the data gathered in a series of interviews with senior professionals in order to identify key factors in the context of information security investment decisions. The authors present detailed findings in context of a simplified framework that security practitioners can utilise for critical review or improvements of investment decisions in their own environments. Extensive details for each category as extracted through a qualitative data analysis are provided along with a category network analysis that highlights strong relationships within the framework.

Date: 2018
References: Add references at CitEc
Citations: View citations in EconPapers (2)

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve. ... 018/IJEIS.2018040101 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jeis00:v:14:y:2018:i:2:p:1-20

Access Statistics for this article

International Journal of Enterprise Information Systems (IJEIS) is currently edited by Gianluigi Viscusi

More articles in International Journal of Enterprise Information Systems (IJEIS) from IGI Global
Bibliographic data for series maintained by Journal Editor ().