Skip to main content
Joe C. Hawley · ResearchCybersecurity governance, risk, and value

Cybersecurity Value

Research Journal

Journal entries for this research project. View global journal →

6 entries

  1. Update

    A New Home and Name for This Research

    I moved this research platform to research.joechawley.com and renamed it Joe C. Hawley · Research.

    Read entry →
  2. Milestone

    A New Research Direction: The Realized Value of Cybersecurity

    I am starting Project 002, which asks how security organizations can consistently measure and communicate the realized business value they deliver. Project 001 is paused.

    Read entry →
  3. Update

    A First Literature Pass for Project 002

    I finished a first, targeted literature pass. The closest existing model is outcome-driven metrics with protection-level agreements, and I added a proposition to test how my framework relates to it.

    Read entry →
  4. Milestone

    Choosing a Method and a First Framework for Project 002

    I selected Design Science Research for Project 002, drafted framework v0.2 (the Realized Value Cycle), and reframed practitioner interviews as evaluation rather than discovery.

    Read entry →
  5. Update

    Evaluating Project 002 Without Participants

    I dropped data collection from people for Project 002. The framework will be evaluated through requirements testing, comparative analysis, and a test against public material.

    Read entry →
  6. Update

    Making Project 002 Role-Neutral

    I narrowed Project 002 to a role-neutral scope. The study now asks which roles or capabilities perform validation and communication, instead of testing a specific role.

    Read entry →
Journal: Cybersecurity Value | Joe C. Hawley · Research