Cybersecurity Research: A Review of Current Research Topics

Abstract

This paper presents a systematic review of empirical research on cybersecurity issues. 14 empirical articles about cybersecurity, published in the two top IS journals, MISQ (12) and ISR (2), between 2008 and 2017, were selected and analyzed, classified into three categories: individual level (non-work setting), employee level (work setting), and organization level (policy/regulation environment). This paper provides a holistic picture of cybersecurity issues, for instance, fundamental theories, impressive research methods, and influencing factors. More importantly, for the first time an integrative framework was developed by R Project, which potentially text-mines end-users’ behaviors and decision-making processes toward cybersecurity under the circumstance of security breach. Some explanations of extant empirical study and potential research are addressed and discussed as well.