Shifting from Information Security towards a Cybersecurity Paradigm

Abstract

The richness of terminologies in the field of Information Technology (IT), Information Security (IS) or cyber-related risks is advantageous. However, when the theoretical legacy varies between different definitions and meanings for the same term, it creates confusion and value is lost. This paper introduces the inconsistency and problems that arise when overcoming discrepancies in cybersecurity terminology; inconsistency and problems that lead to misunderstanding and misuse. This, in turn, renders insecurity for organisations. Derailing from true meaning affects the type of control in place and directly impacts on cybersecurity scope, derivations, meanings and respectively, implementation. The authors of this paper argue that the use of a unified terminology fosters additional value and empowerment, enhancing risk oversight (countermeasures and safeguards). Therefore, as a response to the ensuing confusion, this paper explores the determinants of interchangeable terminology and meanings, and it analyses the nature of theoretical legacy as well as detrimental internal and external organisational factors. It does so with the purpose of identifying and clarifying the cause and effects of the confusion. This paper shall contribute to clarifying the scope of cybersecurity, derivation, and meanings based on a systematic literature review of prior studies.