Centralised IT Structure and Cyber Risk Management

Abbasi, K. A. A., Petford, N. and Hosseinian Far, A. (2021) Centralised IT Structure and Cyber Risk Management. In: Cybersecurity, Privacy and Freedom Protection in the Connected World : Proceedings of the 13th International Conference on Global Security, Safety and Sustainability, London, January 2021. Springer International.

Abbasi_et_al_Springer_2021_Centralised_IT_Structure_and_Cyber_Risk_Management (319kB)

Item Type:	Book Section
Abstract:	Abstract. Against the backdrop of organisational needs to derive value from IT Organisations through agility, efficiencies and cost effectiveness, many organisations have adopted a decentralised IT organisational structure, ena-bling individual business units the autonomy to implement, operate and govern technology. The increase risk that poses organisations through cyber-attacks, raises the question of how IT security could effectively provide the level of organisations governance to counter cyber threats in a decentralised organisational model. In exploring the challenges in the decentralization of IT security, we highlighted that the accountability of such activities would become diluted, with each business unit managing security in their own methods and practices or lack of, while unable to take full accountability due to the complex independencies of modern system architectures, often resulting in a lack of ownership, accountability and reporting of security at an organisational group level. This ultimately increases the overall security risk to the organization. We further highlighted that while centralization of IT security at a group level would be more effective, a hybrid model of IT security at two-levels with strategy and policy at the central governance level and a degree of autonomy and decision at the IT Operational level could also be considered.
Creators:	Abbasi, Kamran Aqeel Abbasi, Petford, Nick and Hosseinian Far, Amin
Publisher:	Springer International
Faculties, Divisions and Institutes:	?? DIRAA ?? Faculties > Faculty of Business & Law > Business Systems & Operations
Date:	21 May 2021
Date Type:	Publication
Title of Book:	Cybersecurity, Privacy and Freedom Protection in the Connected World : Proceedings of the 13th International Conference on Global Security, Safety and Sustainability, London, January 2021
Language:	English
ISBN:	978-3-030-68534-8
DOI:	https://doi.org/10.1007/978-3-030-68534-8_22
Status:	Published / Disseminated
Refereed:	Yes
Related URLs:	https://www.springer.com/gp/book/9783030... https://pure.northampton.ac.uk/en/public...
URI:	http://nectar.northampton.ac.uk/id/eprint/14351

Actions (login required)

Edit Item

Altmetric