TIM-8390: Strategic Management of Cybersecurity: General and Technology

Abrams, M. (2020). Improving cybersecurity processes. ISSA Journal, 18(3), 35–40.
This article discusses the approach needed to improve processes in complex environments such as security operations centers. By using operational metrics to make work visible, managers and CISOs can work with their teams to improve a variety of processes including alert triage, attack mitigation, incident response, etc.

Andronache, A. (2021). Increasing security awareness through lenses of cybersecurity culture. Journal of Information Systems & Operations Management, 15(1), 7.
This article describes the author's research and determines that attaining organizational resilience differs on how employees perceive formal (awareness and cybersecurity policy) and informal rules (i.e., culture). Further research is called for to determine the long-term effects in enriching Cybersecurity Awareness in the context of Cybersecurity Culture.

Burton, S. L. (2021). Cybersecurity leaders: Knowledge driving human capital development. Buletinul Ştiinţific Al Academiei Trupelor de Uscat, 26(2), 109–120. https://doi.org/10.2478/bsaft-2021-0013
This journal article offers comparative analyses for cybersecurity leaders to engage in the questioning of practices, scrutinize entrenched assumptions about technology, customary practices, and query technology’s outputs by pursuing to comprehend all assumptions that could influence operations.

Hartley, M. (2020). Measuring security effectiveness: A critical requirement for cybersecurity leaders. ISSA Journal, 18(3), 16–22.
This article emphasizes the importance of security leaders continuously looking for ways to improve and evolve their security strategy. Specifically, the importance of measuring the efficacy of their security program is emphasized.

Onumo, A., Ullah-Awan, I., & Cullen, A. (2021). Assessing the moderating effect of security technologies on employees compliance with cybersecurity control procedures. ACM Transactions on Management Information Systems (TMIS), 12(2), 1–29. https://doi.org/10.1145/3424282
This journal article highlights a study that contributes to behavioral security research by highlighting the critical role of leadership and cultural values in fostering organizational adherence to prescribed security control mechanisms.

The World Economic Forum. (2019). The cybersecurity guide for leaders in today's digital world: Shaping the future of cybersecurity and digital trust.
This guide provides 10 tenets for cybersecurity leaders.

Block, S., Munkeby, S. H., & Sambasivam, S. (2021). An empirical examination of the effects of CTO leadership on the alignment of the governance of big data and information security risk management effectiveness. Issues in Informing Science & Information Technology, 18, 41. https://doi.org/10.28945/4799
This study raised questions about CTO leadership styles, the specific governance structures involved related to the alignment of big data and ISRM effectiveness.

Lakhani, A. (2021, November). CompTIA Cybersecurity Analyst (CySA+) CS0-002. Pearson IT Certification.
This video course series covers the following topics: Threat and Vulnerability Management, Software and Systems Security, Security Operations and Monitoring, Incident Response, Compliance and Assessment, and Malware and Incident Response.

Loishyn, A. A., Hohoniants, S., Tkach, M. Y., Tyshchenko, M. H., Tarasenko, N. M., & Kyvliuk, V. S. (2021). Development of the concept of cybersecurity of the organization. TEM Journal, 10(3), 1447–1453.
This journal article offers a variant of developing the concept of cybersecurity, defines the range of participants in ensuring the organization's cybersecurity, and formulates an algorithm for its development and operation.

Mishra, A., Alzoubi, Y. I., Gill, A. Q., & Anwar, M. J. (2022). Cybersecurity enterprises policies: a comparative study. Sensors (Basel, Switzerland), 22(2). https://doi.org/10.3390/s22020538
This journal article details a study that identified 10 common cybersecurity policy aspects in five enterprises: healthcare, finance, education, aviation, and e-commerce. The findings of this study reveal that the importance of cybersecurity requirements differs across multiple organizations. The choice and applicability of cybersecurity policies are determined by the type of information under control and the security requirements of organizations concerning these policies.

Ozkaya, E., & Abdulhayolgu, M. (2022, January). Cybersecurity leadership demystified. Packt Publishing.
This book explores all aspects of the role cybersecurity leaders and executives have in the end-to-end security operations, compliance, human capital management, and the processes used in the organization to minimize losses, decrease vulnerabilities, and rebuild services and processes.