Joe C. HawleyCybersecurity governance, risk, and value

Research Projects

Current and earlier research.

Cybersecurity ValueActive

Measuring and Communicating the Realized Business Value of Cybersecurity

Stage: Lit. Review

How can security organizations consistently measure and communicate the realized business value they deliver?

2 artifacts · Updated Oct 30, 2026

View Project →

BISO GovernancePaused

The Business Information Security Officer as a Governance Intermediary: Improving Cybersecurity Decision Quality Through Trust, Influence, and Risk-Based Decision Making

Stage: Interviews

How does the Business Information Security Officer function as a governance intermediary and boundary-spanning leader to improve the quality of cybersecurity risk decisions between business and security stakeholders?

9 artifacts · Updated Oct 30, 2026

View Project →