Benefits and Challenges in Information Security Certification – A Systematic Literature Review

Mike Hulshof, Maya Daneva*

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

3 Citations (Scopus)
12 Downloads (Pure)

Abstract

Information security certification (ISC) gets increasingly more complex. Although certain benefits, challenges and success factors have been recognized by both scholars and practitioners in the field, little has been done to consolidate the published knowledge. This systematic literature review attempts to consolidate what is currently known on the benefits of ISC, the issues and the challenges to certification, and the success factors that organizations consider while embarking on this process. Following the guidelines of Kitchenham et al., and Kuhrmann et al., we examined 42 papers that are relevant to our area of interest. We identified 12 benefits, 15 challenges, and 8 success factors. Our most important conclusion is that the current certification process is complex and suboptimal; it is expensive and it depends on the auditor’s skills. Finally, we evaluated validity threats and derived some implications for practice and for research.

Original languageEnglish
Title of host publicationBusiness Modeling and Software Design
Subtitle of host publication11th International Symposium, BMSD 2021, Sofia, Bulgaria, July 5–7, 2021, Proceedings
EditorsBoris Shishkov
Place of PublicationCham
PublisherSpringer
Pages154-169
Number of pages16
ISBN (Electronic)978-3-030-79976-2
ISBN (Print)978-3-030-79975-5
DOIs
Publication statusPublished - 2021
Event11th International Symposium on Business Modeling and Software Design, BMSD 2021 - Sofia, Bulgaria
Duration: 5 Jul 20217 Jul 2021
Conference number: 11

Publication series

NameLecture Notes in Business Information Processing
PublisherSpringer
Volume422
ISSN (Print)1865-1348
ISSN (Electronic)1865-1356

Conference

Conference11th International Symposium on Business Modeling and Software Design, BMSD 2021
Abbreviated titleBMSD
Country/TerritoryBulgaria
CitySofia
Period5/07/217/07/21

Keywords

  • Information security auditing practice
  • Security accreditation
  • Security certification
  • Systematic literature review
  • 2024 OA procedure

Fingerprint

Dive into the research topics of 'Benefits and Challenges in Information Security Certification – A Systematic Literature Review'. Together they form a unique fingerprint.

Cite this