A holistic cyber security implementation framework. Issue 3 (8th July 2014)

• Record Type: Journal Article
• Authors: Atoum, Issa; Otoom, Ahmed; Abu Ali, Amer
• Is Part Of: Information management & computer security. Volume 22:Issue 3(2014)
• Page Start: 251
• Page End: 264
• Publication Date: 2014-07-08
• Subjects: Information security management -- Cyber security implementation -- Holistic cyber security -- Security strategic controls -- Strategy implementation framework; Information technology -- Management -- Periodicals; Management information systems -- Periodicals; Computer security -- Periodicals; 658.05
• DOI: 10.1108/IMCS-02-2013-0014
• Languages: English
• ISSNs: 0968-5227

Abstract

Abstract : Purpose: – The purpose of this paper is to propose a holistic cyber security implementation framework (HCS-IF) that lays out the ground for a conceptual, coherent, systematic, overarching and consolidated approach to implement cyber security strategies (CSSs). Design/methodology/approach: – The HCS-IF is conceptually proposed to address the actual needs that are extracted from literature review. The HCS-IF uses and integrates a set of high-level conceptual security controls, solutions, processes, entities, tools, techniques or mechanisms that are already known in the domains of information security management, software engineering and project management to address the identified needs. Findings: – The HCS-IF components and controls collectively interact and cooperate to implement CSSs. The proposed framework is compared with other related frameworks, and the results show that the HCS-IF outperforms other frameworks on most of the suggested comparison criteria. Originality/value: – From a practical standpoint, governments and practitioners alike stand to gain from the findings of this research. Governments who want to implement CSSs on a national level will find the proposed framework useful in overseeing cyber security implementation. Practitioners will be prepared to address the anticipated cyber security implementation challenges and the required controls needed to facilitate cyber-security implementation in a holistic overarching manner.