Promising Future Research In Infosec

This chapter provides an analysis and summary of the key research questions raised in the preceding chapters of the book. It also organizes the needs for future managerial research in the area of InfoSec. Most research being carried out today (and being heavily funded) is technical in nature. It focuses on developing new software and new physical artifacts for securing systems. We are not arguing that this work is not important. However, we are concerned that much of the technology is not being utilized due to problems that are endemic to the human dimension. Buying new technology alone will not solve serious security issues. Questions about why it is not being effectively implemented are critical to make sure that the best technology is meeting its intended purpose. Future management research will provide the answers to these questions.