The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research

<p>This study proposes using an established common body of knowledge (CBK) as one means of organizing information security literature.  Consistent with calls for more relevant information systems (IS) research, this industry-developed framework can motivate future research towards topics that...

Full description

Bibliographic Details
Main Authors: Kenneth J. Knapp, F. Nelson Ford, Thomas E. Marshall, R. Kelly Rainer, Jr.
Format: Article
Language:English
Published: Association of Digital Forensics, Security and Law 2007-03-01
Series:Journal of Digital Forensics, Security and Law
Online Access:http://ojs.jdfsl.org/index.php/jdfsl/article/view/201
_version_ 1811289796986798080
author Kenneth J. Knapp
F. Nelson Ford
Thomas E. Marshall
R. Kelly Rainer, Jr.
author_facet Kenneth J. Knapp
F. Nelson Ford
Thomas E. Marshall
R. Kelly Rainer, Jr.
author_sort Kenneth J. Knapp
collection DOAJ
description <p>This study proposes using an established common body of knowledge (CBK) as one means of organizing information security literature.  Consistent with calls for more relevant information systems (IS) research, this industry-developed framework can motivate future research towards topics that are important to the security practitioner.  In this review, forty-eight articles from ten IS journals from 1995 to 2004 are selected and cross-referenced to the ten domains of the information security CBK.  Further, we distinguish articles as empirical research, frameworks, or tutorials.  Generally, this study identified a need for additional empirical research in every CBK domain including topics related to legal aspects of information security.  Specifically, this study identified a need for additional IS security research relating to applications development, physical security, operations security, and business continuity.  The CBK framework is inherently practitioner oriented and using it will promote relevancy by steering IS research towards topics important to practitioners.  This is important considering the frequent calls by prominent information systems scholars for more relevant research.  Few research frameworks have emerged from the literature that specifically classify the diversity of security threats and range of problems that businesses today face.  With the recent surge of interest in security, the need for a comprehensive framework that also promotes relevant research can be of great value.</p>
first_indexed 2024-04-13T04:01:48Z
format Article
id doaj.art-12c95bf702c74fd2a0baac8f119a8ea8
institution Directory Open Access Journal
issn 1558-7215
1558-7223
language English
last_indexed 2024-04-13T04:01:48Z
publishDate 2007-03-01
publisher Association of Digital Forensics, Security and Law
record_format Article
series Journal of Digital Forensics, Security and Law
spelling doaj.art-12c95bf702c74fd2a0baac8f119a8ea82022-12-22T03:03:27ZengAssociation of Digital Forensics, Security and LawJournal of Digital Forensics, Security and Law1558-72151558-72232007-03-0121934124The Common Body of Knowledge: A Framework to Promote Relevant Information Security ResearchKenneth J. Knapp0F. Nelson Ford1Thomas E. Marshall2R. Kelly Rainer, Jr.3Department of Management USAFA/DFM USAF Academy, Colorado USADepartment of Management Auburn University, AlabamaDepartment of Management Auburn University, AlabamaDepartment of Management Auburn University, Alabama<p>This study proposes using an established common body of knowledge (CBK) as one means of organizing information security literature.  Consistent with calls for more relevant information systems (IS) research, this industry-developed framework can motivate future research towards topics that are important to the security practitioner.  In this review, forty-eight articles from ten IS journals from 1995 to 2004 are selected and cross-referenced to the ten domains of the information security CBK.  Further, we distinguish articles as empirical research, frameworks, or tutorials.  Generally, this study identified a need for additional empirical research in every CBK domain including topics related to legal aspects of information security.  Specifically, this study identified a need for additional IS security research relating to applications development, physical security, operations security, and business continuity.  The CBK framework is inherently practitioner oriented and using it will promote relevancy by steering IS research towards topics important to practitioners.  This is important considering the frequent calls by prominent information systems scholars for more relevant research.  Few research frameworks have emerged from the literature that specifically classify the diversity of security threats and range of problems that businesses today face.  With the recent surge of interest in security, the need for a comprehensive framework that also promotes relevant research can be of great value.</p>http://ojs.jdfsl.org/index.php/jdfsl/article/view/201
spellingShingle Kenneth J. Knapp
F. Nelson Ford
Thomas E. Marshall
R. Kelly Rainer, Jr.
The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research
Journal of Digital Forensics, Security and Law
title The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research
title_full The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research
title_fullStr The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research
title_full_unstemmed The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research
title_short The Common Body of Knowledge: A Framework to Promote Relevant Information Security Research
title_sort common body of knowledge a framework to promote relevant information security research
url http://ojs.jdfsl.org/index.php/jdfsl/article/view/201
work_keys_str_mv AT kennethjknapp thecommonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT fnelsonford thecommonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT thomasemarshall thecommonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT rkellyrainerjr thecommonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT kennethjknapp commonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT fnelsonford commonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT thomasemarshall commonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch
AT rkellyrainerjr commonbodyofknowledgeaframeworktopromoterelevantinformationsecurityresearch