Identifying and Ranking Knowledge Management Tools and Techniques Affecting Organizational Information Security Improvement

Extending the Frontiers of Electronic Commerce Knowledge through Cybersecurity

As technology becomes more sophisticated so do cyber-attacks. The resilience of electronic commerce organisations represents a critical point nowadays because it influences consumer and digital business behaviour. In this context, the cybersecurity and electronic commerce knowledge were reviewed as a unit. The main aim of this paper is to support researchers and managers in understanding the theoretical framework and to provide a knowledge-based model. To achieve this aim, the authors performed an analysis of 14,585 papers from the Web of Science Core Collection that generated two visualized networks, analyzed with the metrics mean silhouette, modularity, betweenness centrality, and citation bursts in the context of digital resilience. The mapping process results show that the human factor represents the central junction with the fear of cyber-attacks and the perception of online shopping as risky. The adoption of electronic commerce and mobile commerce are two challenging research lines in the global economic resilience. Their adoption enabled by big data, artificial intelligence, machine learning, and even blockchain technology can strengthen resilience even when cybersecurity education is needed.

SECI Model Combined with ISO 9001 2015 to Support Organizational KM for Manual Assembly Manufacturing Operations

In a large number of industrial sectors, manual assembly manufacturing operations highly engage tacit knowledge at an individual level. Companies in these sectors need to effectively manage organizational knowledge since it represents a real performance and sustainability lever. Although knowledge management (KM) specialists developed several models, these latter remain difficult to implement due to several barriers and limitations related to industrial reality and models ambiguity. This paper proposes an organizational knowledge management (OKM) framework for manual assembly manufacturing operations that is based on ISO 9001:2015 and SECI conversion cycle. This framework offers guidance for implementing a KM approach within the quality management system (QMS) allows to manage knowledge differently with regards to its tacitness level and overcomes many of the most common KM limitations. An experimental application based on a single case research design in an aeronautical assembly company is conducted to confirm the applicability and effectiveness of the framework suggested.

Exploiting organisational vulnerabilities as dark knowledge: conceptual development from organisational fraud cases

Purpose

This paper aims to assert that knowledge of organisational weaknesses, vulnerabilities and compromise points (here termed “dark knowledge”), is just as critical to organisational integrity and hence, must also be managed in a conventional knowledge management sense. However, such dark knowledge is typically difficult to identify and accordingly, few studies have attempted to conceptualise this view.

Design/methodology/approach

Using a background of fraud diamond theory, the authors examine this dark knowledge using a case study analysis of fraud at a large Asia-Pacific telecommunications provider. Semi-structured interviews were also conducted with the firm’s fraud unit.

Findings

The authors identify six components of dark knowledge, being artefactual knowledge, consequential knowledge, knowledge of opportunity, knowledge of experimentality, knowledge of identity and action and knowledge of alternativity.

Originality/value

To the best of the authors’ knowledge, this is the first paper to identify a knowledge type based on organisational compromises and vulnerabilities. The paper shows that accounts of organisational weakness can yet provide knowledge insights.

Enhancing information security best practices sharing in virtual knowledge communities

Purpose

Sharing information security best practices between experts via knowledge management systems is valuable for improving information security practices, exchanging expertise, mitigating security risks, spreading knowledge, reducing costs and saving efforts. The purpose of this paper is developing a conceptual model to enhance the transfer of information security best practices between professionals in virtual communities through a Web-based knowledge management system to exchange their successful experience in handling different information security situations.

Design/methodology/approach

The model is validated by surveying 17 experts’ reviews on the correctness of the model’s structure and its related components through applying deep rich peer debriefing to test suitability. Quantitative data has been collected to achieve confirmatory results.

Findings

The resulting model incorporates five main components that support the formal mechanism for the acquisition and dissemination of knowledge: identification, classification, storage, validation and sharing. The success of knowledge sharing is highly dependent on the active collaboration of community members and highly influenced by motivation. Validating transferred knowledge is vital for ensuring the credibility of the system.

Originality/value

To the best of the author’s knowledge, this paper is one of the first to highlight the role of integrating knowledge management to enhance the effective share and reuse of information security best practices knowledge. The research results can support researchers investigating the topic and generate trustworthy literature to guide information security virtual community developers.