Dynamic Capabilities in Cybersecurity Intelligence: empirical evidence to enhance protection against cyber threats.

This research addresses the relationship of dynamic capabilities in cybersecurity intelligence (DCCI) under information security paradigm. Bolstering on the view of cybersecurity intelligence (CI), the research looks at DCCI as a multidimensional critical framework of abilities and processes, particularly relevant for all business sectors somehow. The DCCI framework is built from a literature review of 47 case studies and tested as of 207 cybersecurity experts spread out in different regions and countries through hierarchical regressions. The DDCI framework is positively associated with CI two different dimensions, Doing and Improving cybersecurity activities while the dimensions Enabling and Managing cybersecurity activities do not present significant impacting in CI. To the best of the authors’ knowledge, this is the first paper that build an empirical instrument to measure a model of dynamic capabilities in cybersecurity intelligence. Findings expand on the perception of CI as multidimensional problems involving firms' innovations and change in information security field. Thus, it progresses to offer new avenues for future research and practice in building DCCI to enhance CI for business and society.

本研究探讨信息安全范式下网络安全情报动态能力（Dynamic Capabilities in Cybersecurity Intelligence，简称DCCI）的内在关联。本研究基于网络安全情报（Cybersecurity Intelligence，简称CI）的研究视角，将DCCI视为一套涵盖能力与流程的多维关键框架，其对各行业均具备一定的适配价值。该DCCI框架首先通过对47项案例研究的文献综述构建完成，随后面向分布于全球不同地区与国家的207名网络安全专家，采用分层回归（hierarchical regressions）方法完成了实证检验。研究发现，DCCI框架与CI的两个维度存在显著正向关联：即开展（Doing）与优化（Improving）网络安全活动相关的维度；而赋能（Enabling）与管理（Managing）网络安全活动的维度则未对CI产生显著影响。据作者所知，本研究是首篇构建实证工具以测度网络安全情报动态能力模型的学术论文。本研究的结论拓展了学界对CI的认知：CI是一类涉及企业创新与信息安全领域变革的多维复杂问题。因此，本研究为未来通过构建DCCI以提升面向企业与社会的CI水平的相关研究与实践提供了全新的研究路径。