An Analysis of Executive Managers Acceptance of Cyber Security Risk Management – A Systematic Review
Year: 2025
Type: review
Abstract: Information security is vital for safeguarding critical assets and services from cyber threats, but it incurs significant organizational costs and technological reliance, raising questions about its value and necessity. Security is not merely a technical issue but a strategic one requiring executive managers' involvement. This study examines how executive management's participation in information security risk management (ISRM) affects organizational security. A systematic literature review of 69 articles identifies the aspects and impacts of executive managers' (EM) involvement in cybersecurity risk management (CRM). Findings indicate that EM involvement is crucial for corporate strategy and business success, enhancing security, visibility and accountability at higher levels. EMs play a key role in protecting critical assets, aligning security strategy with business goals, and fostering a culture of awareness and responsibility. The paper proposes a best practice framework for maintaining EM involvement in CRM, aligning cybersecurity strategy with organizational goals while balancing costs and benefits.
Authors: Becklines, Lordt, El-Gayar, Omar
Institution: Dakota State University
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7017301634
FWCI:
Cites:
Cited by:
Related to: