Security Incident Recognition and Reporting (SIRR): An Industrial Perspective
Abstract
Reports and press releases highlight that security incidents continue to plague organizations. While researchers and practitioners' alike endeavor to identify and implement realistic security solutions to prevent incidents from occurring, the ability to initially identify a security incident is paramount when researching a security incident lifecycle. Hence, this research investigates the ability of employees in a Global Fortune 500 financial organization, through internal electronic surveys, to recognize and report security incidents to pursue a more holistic security posture. The research contribution is an initial insight into security incident perceptions by employees in the financial sector as well as serving as an initial guide for future security incident recognition and reporting initiatives.
Keywords
Cite
@article{arxiv.1706.06818,
title = {Security Incident Recognition and Reporting (SIRR): An Industrial Perspective},
author = {George Grispos and William Bradley Glisson and David Bourrie and Tim Storer and Stacy Miller},
journal= {arXiv preprint arXiv:1706.06818},
year = {2017}
}
Comments
2017 Americas Conference on Information Systems (AMCIS 2017), Boston, Massachusetts, United States