TIM-8390: Strategic Management of Cybersecurity: General and Technology

Amaghionyeodiwe, L. A. (2017). Risk management framework (RMF) and the implementation challenges. Proceedings of the Northeast Business & Economics Association, 11–14.
This journal article describes a study that demonstrates the need for security personnel to be adequately trained and educated in the use of the RMF. The benefits of organizations being able to share knowledge about experiences with the applicability and usage of the security mitigations (and security controls) are discussed.

Artur Sosin. (2018). How to increase the information assurance in the information age. Journal of Defense Resources Management, 9(1), 45–57.
The purpose of this paper is to show that Information Assurance has become one of the most important tools in creating and maintaining a competitive advantage in today’s competitive and global marketplace. The author concludes the paper with the importance of information assurance policies which are the fundamental guidelines for protecting information assets and fulfilling the information assurance objectives of an organization.

Ogbanufe, O., Kim, D. J., Jones, M. C. (2021). Informing cybersecurity strategic commitment through top management perceptions: The role of institutional pressures. Information & Security, 58(7).
This journal article describes a study and findings that emphasize the critical role that top management plays in mediating the influence of institutional pressures on cybersecurity strategy.

Gamble, W. (2020, November). The Cybersecurity Maturity Model Certification (CMMC) – A pocket guide. IT Governance Publishing.
A clear, concise primer on the CMMC (Cybersecurity Maturity Model Certification). This guide summarizes the CMMC and proposes useful tips for implementation.

Sharkov, G. (2020). Assessing the maturity of national cybersecurity and resilience. Connections (18121098), 19(4), 5–24.
This article provides an overview of maturity levels and assessment methodologies for the evaluation of cybersecurity and resilience concerning their applicability and usefulness at sectoral and national levels.

Solansky, S. T., & Beck, T. (2021). Interorganizational information sharing: collaboration during cybersecurity threats. Public Administration Quarterly, 45(1), 105–122.
This journal article discusses a research study and shows that sharing information is critical when collaborative inter-organizational action is required to face cybersecurity threats. Managers of organizations that respond to cybersecurity threats should promote the tendency to share information with other organizations that have the resources to aid in addressing the threat. Organizations involved in cybersecurity threats that are willing to share information are more willing to participate in integrative interorganizational efforts.