The Roles of the Board of Directors and Senior Management in Cybersecurity: A Systematic Literature Review
摘要
This study reports on the findings of a systematic literature review of research papers on the roles of the Board of Directors (BoD) and senior management (SM) in cybersecurity management. The qualitative analysis of 27 papers revealed four broad themes: governance, resource allocation, communication and business culture. Limited empirical research exists on the role of senior management in the response to and recovery from cyber incidents. The identified themes can guide empirical research in organisations on the current practice of the Board of Directors and senior management in response and recovery decisions and actions.