Cybersecurity threats information (CTI) sharing protects firms and stakeholders from cyberattacks and avoid security vulnerabilities. However, despite these benefits of CTI sharing, firms are still unwilling to share due to barriers and challenges related to a lack of trust. Some studies explored the significance of trust in sharing cyber security information, but further studies are required to determine what dimensions compose trust, which processes support trust, and what trust building policies have been enacted to foster the sharing of information in cybersecurity ecosystems, which is the main purpose of this review. The deliverables from this review present 25 trust dimensions, 6 main processes supporting trust, and 30 trust government policies enacted to foster trust and sharing in cybersecurity. These outcomes enable the creation of a framework for building trust in cybersecurity ecosystems and facilitating the cyberthreat information sharing.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Trust and Trust-Building Policies to Support Cybersecurity Information Sharing: A Systematic Literature Review

  • Richard Posso,
  • Jörn Altmann

摘要

Cybersecurity threats information (CTI) sharing protects firms and stakeholders from cyberattacks and avoid security vulnerabilities. However, despite these benefits of CTI sharing, firms are still unwilling to share due to barriers and challenges related to a lack of trust. Some studies explored the significance of trust in sharing cyber security information, but further studies are required to determine what dimensions compose trust, which processes support trust, and what trust building policies have been enacted to foster the sharing of information in cybersecurity ecosystems, which is the main purpose of this review. The deliverables from this review present 25 trust dimensions, 6 main processes supporting trust, and 30 trust government policies enacted to foster trust and sharing in cybersecurity. These outcomes enable the creation of a framework for building trust in cybersecurity ecosystems and facilitating the cyberthreat information sharing.