Abstract
Today’s organizations use control-centred security management systems as a preventative shield against a broad spectrum of attacks. However, these have proven to be less effective against the customized and innovative strategies and operational techniques used by Advanced Persistent Threats (APTs). In this short paper we argue that to combat APTs, organizations need a strategic-level shift away from a traditional prevention-cantered approach to that of a response-cantered one. Drawing on the information warfare (IW) paradigm in military studies, and using Dynamic Capability Theory (DCT), this research examines the applicability of IW capabilities in the corporate domain. We propose a research framework to argue that conventional prevention-centred response capabilities; such as incident response capabilities and IW-centred security capabilities can be integrated into IW-enabled dynamic response capabilities that improve enterprise security performance.
Recommended Citation
Shah, Abid Hussain; Ahmad, Atif Ahmad; Maynard, Sean B.; and Naseer, Humza, "Enhancing Strategic Information Security Management in Organizations through Information Warfare Practices" (2019). ACIS 2019 Proceedings. 48.
https://aisel.aisnet.org/acis2019/48