|
IS Economics:
- Analyzing the
value of IT investments
- Economic analysis
of the value of customization and versioning
- Cost- benefit
analysis of information security
IS Policy:
- Analyzing the
impact of vulnerability disclosure
- When to release
and distribute software patches
Research
Funding:
- Social Sciences
and Humanities Research Council of Canada (SSHRC): Using information
security awareness to manage the human aspect of information security
($98,655 total). 2008 – 2011.
- Social Sciences
and Humanities Research Council of Canada (SSHRC): Information
Security Program as the driver of information security performance: An
Empirical Investigation ($72,580 total). 2006-2009.
- NET Institute
(Summer Research Grant): Assessing the Value of Network Security Technologies
(US$ 3,000 total). Summer 2007.
- Some other grants
from Sauder School of Business, HSS, and UBC/SSHRC.
Published
Papers:
- Bulgurcu, B., Cavusoglu, H., Benbasat, I. (Conditionally
Accepted –Oct 2009). Information Security Policy
Compliance: An Empirical Study of Rationality-Based Beliefs and
Information Security Awareness. Management Information Systems
Quarterly.
- Cavusoglu,
H.,
Hu, N., Li, Y., Ma, D. (Conditionally
Accepted - August 2009). Information
Technology Diffusion with Influentials, Imitators, and Opponents:
Model and Preliminary Evidence. Journal of Management
Information Systems.
- Cavusoglu, H.,
Raghunathan, S., Cavusoglu, H.
(2009). Configuration of and Interaction between Information
Security Technologies: The Case of Firewalls and Intrusion Detection
Systems. Information Systems Research, 20 (2), June, pp.
198-217.
- Al-Natour, S., Cavusoglu,
H. (2009). The Strategic
Knowledge-based Dependency Diagrams: A Tool for Analyzing Strategic
Knowledge Dependencies for the Purposes of Understanding and
Communicating. 10 (2-3), Sep., pp. 103-121. Information Technology and
Management (ITM)
- Cavusoglu, H., Cavusoglu, H.,
Zhang, J. (2008). Security Patch Management: Share the Burden or Share
the Damage? Management Science, 54(4), 657 - 670.
- Cavusoglu, H., Cavusoglu, H.,
Raghunathan, S. (2007). Efficiency of Vulnerability Disclosure
Mechanisms to Disseminate Vulnerability Knowledge. IEEE
Transactions on Software Engineering, 33(3), 171 - 185.
- Cavusoglu, H., Cavusoglu, H.,
Raghunathan, S. (2007). Selecting a Customization Strategy Under
Competition: Mass Customization, Targeted Mass Customization, and
Product Proliferation. IEEE Transactions on Engineering
Management, 54(1), 12 - 28.
- Cavusoglu, H., Cavusoglu, H.,
Raghunathan, S. (2004). Economics of IT Security Management: Four
Improvements to Current Security Practices. Communications of
the AlS, 14(article 3)
Completed
Papers:
- Cavusoglu,
H.,
Cavusoglu, H., Raghunathan, S. Value of Postponement and Information
Sharing Strategies in a Two-Level Supply Chain.
- Tan, C., Thiele,
V., Cavusoglu, H., Lim, E.
. Delegating Decisional Rights for Investment Projects: Lifting the
Curse of Unwarranted Escalation? [SSRN]
- Banker, R., Cavusoglu, H., Kumar, N. Investments
in Technology and Value Appropriation.
- Cavusoglu, H., Cavusoglu, H., Son, J.,
Benbasat, I. Information Security
Control Resources in Organizations: A Multidimensional View and Their
Key Drivers.
- Cavusoglu, H. Making Sound Security Investment
Decisions.
Recent Conference/Workshop:
- Bulgurcu, B., Cavusoglu, H., Benbasat, I.
(Forthcoming). Quality and
Fairness of an Information Security Policy as Antecedents of
Employees’ Security Engagement in the Workplace: An Empirical Investigation. 43rd Hawaii International Conference on
System Sciences (HICSS 2010). Koloa, Hawaii.
Jan 5-8, 2010.
- Bulgurcu, B., Cavusoglu, H., Benbasat, I.
(2009). Roles of
Information Security Awareness and Perceived Fairness In Information
Security. INFORMS Annual Meeting
2009. San Diego,
California.
- Bulgurcu, B., Cavusoglu, H., Benbasat, I. (2009). Effects of Individual and
Organization Based Beliefs and the Moderating Role of Work Experience
on Insiders’ Good Security Behavior. Proceedings of IEEE Workshop on Software Security
Process. Vancouver,
Canada.
August 29-31, 2009.
- Bulgurcu, B., Cavusoglu,
H., Benbasat, I. (2009). The
Moderating Role of Work Experince: How does it Change the Impact of
Employees' Individual and Organizational Beliefs to Comply with the
Information Security Policy? 15th
Americas Conference
on Information Systems, San
Francisco, California,
August 6 - 9, 2009.
- Bulgurcu, B., Cavusoglu,
H., Benbasat, I.
(2008). Analysis of Perceived Burden of Compliance: The Role of
Fairness, Awareness, and Facilitating Conditions. Proceedings of the Workshop
on Information Security and Privacy, Paris, France.
- Cavusoglu, H., Cavusoglu,
H., Son, J., and Benbasat, I.
(2008). What Drive Organizations to Invest in Information Security
Controls? How Do Investments Improve Information Security Performance?
Workshop on Information Systems
and Economics (WISE) 2008, Paris,
France.
|
