dc.creatorPigola, Angélica
dc.creatorDa Costa, Priscila Rezende
dc.creatorFerasso, Marcos
dc.creatorCavalcanti da Silva, Luís Fabio
dc.date2024-06-19T04:56:10Z
dc.date2024-06-19T04:56:10Z
dc.date2024
dc.date.accessioned2024-07-17T21:14:01Z
dc.date.available2024-07-17T21:14:01Z
dc.identifier10.1016/j.techsoc.2023.102449
dc.identifier0160791X
dc.identifierhttps://hdl.handle.net/20.500.12728/11402
dc.identifier.urihttps://repositorioslatinoamericanos.uchile.cl/handle/2250/9509603
dc.descriptionIn recent years, investments in cybersecurity capabilities (CC) have emerged as an essential practice in reducing cyberattacks and optimizing the usage of technologies. Therefore, optimal investments in capabilities must be determined according to the cybersecurity scenario of firms. This experiment pursues an understanding of the effectiveness of the iterative learning process in investments in CC. Through a simulator game, experienced and inexperienced participants overcome challenges related to uncertainties of cyber incidents to decision-making in cybersecurity capability investments. The collected data were empirically tested from 119 participants analyzing 3,808 simulation runs. The findings demonstrated that there is a slight difference in the learning curve between the two groups even if they learn proactively and iteratively. However, experienced, and inexperienced groups did not demonstrate enough capacity to analyze the cybersecurity ecosystems designed in the simulator game to mitigate cyber incidents. Both groups exhibited similar results regarding gaps to invest in CC to address uncertainties associated with cyber threats. In this sense, this experiment highlights the relevance of learning about CC investments in any context to avoid resource losses and time to uncover the complexities related to incident responses. © 2023 Elsevier Ltd
dc.descriptionCoordenação de Aperfeiçoamento de Pessoal de Nível Superior, CAPES, (001)
dc.formatapplication/pdf
dc.languageen
dc.publisherElsevier Ltd
dc.subjectCybersecurity
dc.subjectDynamic capabilities
dc.subjectExperiment
dc.subjectIterative learning
dc.subjectSimulation
dc.titleEnhancing cybersecurity capability investments: Evidence from an experiment
dc.typeArticle


Este ítem pertenece a la siguiente institución