Encouraging creativity and innovation as part of the cybersecurity culture of the organisation for sustainable value and growth

Abstract

Creativity and innovation are vital to combat cybercrime and protect information and related systems of organisations. Organisations in which creativity and innovation are applied in the security function experience fewer cyber and information security breaches, manage cyber risk more easily, experience greater productivity and faster growth and can implement the latest technologies, knowing that the organisation and systems are protected. However, there is limited guidance for organisations on how to incorporate creativity and innovation as part of the cybersecurity culture. In this chapter, the determinants that positively influence creativity and innovation in organisations are outlined and applied to the context of a cybersecurity culture. A creativity and innovation framework for a cybersecurity culture is presented as a theoretical contribution, leveraging values and determinants derived from existing creativity and innovation models and frameworks. The creativity and innovation framework for a cybersecurity culture with a corresponding scorecard, as a practical contribution, can be utilised by the leadership in the security function to implement the determinants to encourage creativity and innovation as part of the cybersecurity culture in the organisation.