Knowledge Management for Cybersecurity in Business Organizations: A Case Study
Shouhong Wang, Hai Wang · Journal of Computer Information Systems · 2019
Knowledge management (KM) plays important roles in cybersecurity. This study collects five real-life cases of good practices of KM for the domain of cybersecurity in business organizations. Through an iterative process of team-based qualitative data analysis of the five cases, the study develops a model of KM for cybersecurity that conceptualizes three common aspects of KM practices for cybersecurity in business organizations. First, KM for cybersecurity in business organizations has clear specialized organizational structures that involve three inter-organizational tiers across the organization boundaries. Second, the knowledge flows of KM for cybersecurity in business organizations emphasize on explicit, declarative, and specific knowledge. Third, in comparison with KM for other domains, KM for cybersecurity has well-defined objective measures to assess the effectiveness of KM. The domain-specific KM model based on the good practice cases provides a road-map for KM practices in the domain of cybersecurity in business organizations.