Demystifying analytical information processing capability: The case of cybersecurity incident response

摘要

Little is known about how organizations leverage business analytics (BA) to develop, process, and exploitanalytical information in cybersecurity incident response (CSIR). Drawing on information processing theory(IPT), we conducted a field study using a multiple case study design to answer the following research question:How do organizations exploit analytical information in the process of cybersecurity incident response by usingbusiness analytics? We developed a theoretical framework that explains how organizations respond to the dynamiccyber threat environment by exploiting analytical information processing capability in the CSIR process.This, in turn, leads to positive outcomes in enterprise security performance, delivering both strategic andfinancial benefits. Our findings contribute to the BA and cybersecurity literature by providing useful insights intoBA applications and the facilitation of analytics-driven decision making in CSIR. Further, they contribute to IPTby providing new insights about analytical information needs, mechanisms to seek analytical information, andanalytical information use in the process of CSIR.