Adoption of Cybersecurity Innovations—A Systematic Literature Review

The adoption of new cybersecurity capabilities in an organization can be seen as an example of the adoption of technological innovations. While regulators use rules, standards, and codes of practice to influence the state of cybersecurity in regulated organizations—other factors, such as technological complexity, organizational size, and management support have been shown to influence technological adoption. Limited empirical research exists on factors influencing cybersecurity implementation in organizations. Existing models have focused on productivity or leisure applications—adoption of security innovations is fundamentally different because their adoption is founded on the intention to prevent incidents in the future with a limited direct positive gain. A systematic literature review on existing research on adoption of security innovations is presented and suggestions for further research in more quantitative measures for the drivers of organizational cybersecurity technology adoption is suggested.