Combining Sociocultural Intelligence with Artificial Intelligence to Increase Organizational Cyber Security Provision through Enhanced Resilience

Abstract

Although artificial intelligence (AI) and machine learning (ML) can be deployed to improve cyber security management, not all managers understand the different types of AI/ML and how they are to be deployed alongside the benefits associated with sociocultural intelligence. The aim of this paper was to provide a context within which managers can better appreciate the role that sociocultural intelligence plays so that they can better utilize AI/ML to facilitate cyber threat intelligence (CTI). We focused our attention on explaining how different approaches to intelligence (i.e., the intelligence cycle (IC) and the critical thinking process (CTP)) can be combined and linked with cyber threat intelligence (CTI) so that AI/ML is used effectively. A small group interview was undertaken with five senior security managers based in a range of companies, all of whom had extensive security knowledge and industry experience. The findings suggest that organizational learning, transformational leadership, organizational restructuring, crisis management, and corporate intelligence are fundamental components of threat intelligence and provide a basis upon which a cyber threat intelligence cycle process (CTICP) can be developed to aid the resilience building process. The benefit of this is to increase organizational resilience by more firmly integrating the intelligence activities of the business so that a proactive approach to cyber security management is achieved.

Building a thematic framework of cybersecurity: a systematic literature review approach

“…In addition, they provide feedback on areas requiring improvement and observe how employees use their laptops, taking necessary actions (Butler and Brown, 2023). Importantly, a cybersecurity monitoring team contributes to crisis management, an essential aspect of organizational security (Trim and Lee, 2022). By formalizing communication channels and implementing rapid incident response protocols, such a team can take necessary cybersecurity actions promptly, protecting the organization from emerging threats and vulnerabilities and mitigating the risk of employees falling victim to cybersecurity threats like phishing attacks (Frank et al, 2022).…”

“…Empirical evidence suggests that top management support reduces the impact of institutional pressures on the organization's overall cybersecurity strategy (Ogbanufe et al, 2021), increases cybersecurity maturity (Kumar et al, 2021;Heymann et al, 2022;Loonam et al, 2022) and has a noteworthy influence on a company's information security performance (Mukundan and Prakash Sai, 2014;Atmojo et al, 2019;Klju cnikov et al, 2019;Shaikh and Siponen, 2023). Leadership, JSIT 26,2 including transformational leadership (Loonam et al, 2022;Trim and Lee, 2022) and ethical leadership (Wang and Xu, 2021), plays an active role in institutionalizing security processes and creating a supportive structure to enhance the development and application of cognitive understanding in cybersecurity management (Onumo et al, 2021). Strengthened by trust in the supervisor (Xu and Mahenthiran, 2021), both supervisorsubordinate guanxi and organizational commitment drive employees' compliance behavior (Liu et al, 2020).…”

“…Sadok et al's (2020) study stressed the importance of having a security response team. Crisis management is a necessary aspect of organizational security (Trim and Lee, 2022), so when there is a formal communication channel, employees are at a lower risk of falling victim to phishing attacks (Frank et al, 2022). Implementation of close monitoring of security metrics (Malaivongs et al, 2022) helps the security team take necessary cybersecurity actions (Butler and Brown, 2023).…”

“…While some studies have attempted to systematically review the issue of cybersecurity, their focus has not been on global organizations for cybersecurity implementation. For example, previous studies have been limited to specific topics such as blockchain cybersecurity (Taylor et al. , 2020), cybersecurity in the automotive industry (Fernandez de Arroyabe et al.…”

Managing Cybersecurity Threats and Increasing Organizational Resilience

“…In addition, security threats to the proposed service model are made known and, most importantly, security requirements to counteract security threats are detailed. In [11], attention is given to how managers can better appreciate the role that sociocultural intelligence plays and utilize artificial intelligence more to facilitate cyber threat intelligence (CTI). The intelligence cycle (IC) and the critical thinking process (CTP) are described and combined, and a cyber threat intelligence cycle process (CTICP) is developed that aids the resilience-building process.…”