Knowledge Management and Continuous Improvement in Cyberspace

This paper discusses the synergetic relationship between Cyberspace, Knowledge Management, and Continuous Improvement. Information Systems connected through Cyberspace establish the shared interaction context to support data processing and the information life-cycle required to create new knowledge assets and promote core competencies. The interdependence between Knowledge and Cyberspace and its weaknesses requires a more profound comprehension of Information Security and Cybersecurity concepts. We argue their differences are limited and related to a greater emphasis on business success, business continuity, and compliance for Information Security (InfoSec); and a broader technological focus on Cybersecurity (CySec). The InfoSec/CySec cross-functional domain addresses Cyberspace challenges to business cyber-resilience, requiring a new mindset and evolving corporate governance models and structures. To address Cyberspace threats that explore the vulnerabilities of information assets, we offer an overview of the ISO/IEC 27005 risk management process and highlight the IMF recommendation to integrate it into the corporate risk processes. As it becomes apparent, the InfoSec/CySec domain also uses technologies and generates data that are corporate information assets requiring protection. Continuous improvement and lessons learned are paramount for InfoSec/CySec risk management and business continuity applying PDCA process, proving the relation with Cyberspace.