动态信息安全管理能力：组织绩效战略
Dynamic Information Security Management Capability: Strategising for Organisational Performance
摘要：
网络安全攻击的频率、影响、后果和复杂性日益增加，正成为企业董事会和执行管理层的战略关注点。因此，除了关注生产力和性能外，组织还优先考虑信息安全管理（ISM）。然而，研究表明，很少或根本没有概念化的动态ISM能力及其与组织绩效的联系。在这项研究中，我们着手1）定义和描述一个组织层面的动态ISM能力，2）开发一个战略模型，链接资源与这种动态能力，然后3）实证证明如何动态ISM能力有助于企业绩效。通过借鉴资源基础理论（RBT）和动态能力观（DCV），我们已经开发了动态ISM能力模型，以解决所发现的差距。在我们开展这项研究时，我们将实证检验这个模型，以证明ISM能力和组织绩效之间的因果关系。
英文摘要：
The increasing frequency, impact, consequence and sophistication of cybersecurity attacks is becoming a strategic concern for boards and executive management of organisations. Consequently, in addition to focusing on productivity and performance, organisations are prioritizing Information Security Management (ISM). However, research has revealed little or no conceptualisation of a dynamic ISM capability and its link to organisational performance. In this research, we set out to 1) define and describe an organisational level dynamic ISM capability, 2) to develop a strategic model that links resources with this dynamic capability, and then 3) empirically demonstrate how dynamic ISM capability contributes to firm performance. By drawing on Resource-Based Theory (RBT) and Dynamic Capabilities View (DCV), we have developed the Dynamic ISM Capability model to address the identified gap. As we develop this research, we will empirically test this model to demonstrate causality between ISM capability and organisational performance.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
