Continuous improvement of information security management: an organisational learning perspective

ABSTRACT

This study explores ways to empower organisations to continuously improve their information security management (ISM). Drawing upon the dynamic capabilities approach, we investigated the mechanism wherein absorptive capacity has an effect. We found that absorptive capacity affects an organisation’s continuous improvement of ISM, with its effect mediated through an organisation’s adaptability to information security threats. In addition, the effect of absorptive capacity on adaptability is contingent upon the organisation’s competitive pressure, which enhances the mediating effect of adaptability. We tested our research model using survey data collected from 130 US-based managers familiar with information security management in their organisations. Theoretical and practical implications of the study are discussed.

KEYWORDS:

• Information security management
• continuous improvement
• dynamic capabilities
• absorptive capacity
• adaptability
• strategic flexibility
• competitive pressure

Disclosure statement

No potential conflict of interest was reported by the author(s).

Notes

1. https://www.iso.org/isoiec-27001-information-security.html

2. https://www.firemon.com/continuous-improvement-key-network-security-management/

3. https://www.zippia.com/manager-jobs/demographics/

https://datausa.io/profile/soc/management-occupations#demographics

Additional information

Funding

This work was supported by the National Science Foundation [SES-1420758].