Get 20M+ Full-Text Papers For Less Than $1.50/day. Start a 14-Day Trial for You or Your Team.

Learn More →

Cyberattacks as “state of exception” reconceptualizing cybersecurity from prevention to surviving and accommodating

Cyberattacks as “state of exception” reconceptualizing cybersecurity from prevention to surviving... This paper aims to outline how destructive communication exemplified by ransomware cyberattacks destroys the process of organization, causes a “state of exception,” and thus constitutes organization. The authors build on Agamben's state of exception and translate it into communicative constitution of organization (CCO) theory.Design/methodology/approachA significant increase of cyberattacks have impacted organizations in recent times and laid organizations under siege. This conceptual research builds on illustrative cases chosen by positive deviance case selection (PDCS) of ransomware attacks.FindingsCCO theory focuses mainly on ordering characteristics of communication. The authors aim to complement this view with a perspective on destructive communication that destroys the process of organization. Based on illustrative cases, the authors conceptualize a process model of destructive CCO.Practical implicationsThe authors expand thoughts about a digital “corporate immune system” to question current offensive cybersecurity strategies of deterrence and promote resilience approaches instead.Originality/valueInformed by destructive communication of cyberattacks, this theory advancement supports arguments to include notions of disorder into CCO theory. Furthermore, the paper explains where disruptions like cyberattacks may trigger sensemaking and change to preserve stability. Finally, a novel definition of ‘destructive CCO’ is provided: Destructive Communication Constitutes Organization by disrupting and destroying its site and surface while triggering sensemaking and becoming part of sensemaking itself. http://www.deepdyve.com/assets/images/DeepDyve-Logo-lg.png Journal of Information, Communication and Ethics in Society Emerald Publishing

Cyberattacks as “state of exception” reconceptualizing cybersecurity from prevention to surviving and accommodating

Download PDF
19 pages

Loading next page...
 
/lp/emerald-publishing/cyberattacks-as-state-of-exception-reconceptualizing-cybersecurity-rGQMS8ODCp
Publisher
Emerald Publishing
Copyright
© Emerald Publishing Limited
ISSN
1477-996X
DOI
10.1108/jices-01-2021-0015
Publisher site
See Article on Publisher Site

Abstract

This paper aims to outline how destructive communication exemplified by ransomware cyberattacks destroys the process of organization, causes a “state of exception,” and thus constitutes organization. The authors build on Agamben's state of exception and translate it into communicative constitution of organization (CCO) theory.Design/methodology/approachA significant increase of cyberattacks have impacted organizations in recent times and laid organizations under siege. This conceptual research builds on illustrative cases chosen by positive deviance case selection (PDCS) of ransomware attacks.FindingsCCO theory focuses mainly on ordering characteristics of communication. The authors aim to complement this view with a perspective on destructive communication that destroys the process of organization. Based on illustrative cases, the authors conceptualize a process model of destructive CCO.Practical implicationsThe authors expand thoughts about a digital “corporate immune system” to question current offensive cybersecurity strategies of deterrence and promote resilience approaches instead.Originality/valueInformed by destructive communication of cyberattacks, this theory advancement supports arguments to include notions of disorder into CCO theory. Furthermore, the paper explains where disruptions like cyberattacks may trigger sensemaking and change to preserve stability. Finally, a novel definition of ‘destructive CCO’ is provided: Destructive Communication Constitutes Organization by disrupting and destroying its site and surface while triggering sensemaking and becoming part of sensemaking itself.

Journal

Journal of Information, Communication and Ethics in Society – Emerald Publishing

Published: Feb 7, 2022

Keywords: State of exception; Cybercrimes; Ransomware; WannaCry; Backhacking; Communication Constituting Organization (CCO); Disruption; Backhacking

References

  • Criticality: How changes preserve stability in self-organizing systems
    Accard, P.
  • Scoping studies: towards a methodological framework
    Arksey, H.; Malley, L.O.; O’Malley, L.
  • 2 constitutional amendments: ‘materializing’
    Ashcraft, K.L.; Kuhn, T.R.; Cooren, F.
  • When the screens went black: how NotPetya taught Maersk to rely on resilience – not luck – to mitigate future cyber-attacks
    Bannister, A.
  • Finding the quality in qualitative research
    Baym, N.K.; Silver, D.; Massanari, A.
  • Qualitative research: recent developments in case study methods
    Bennett, A.; Elman, C.
  • Vom US-Geheimdienst entwickelt, Von Erpressern Genutzt
    Beuth, P.
  • Cybercrime: on the trail of the internet extortionists
    Biermann, V.K.; Kamel, Z.
  • On a growing dualism in organizational discourse research
    Bisel, R.S.
  • A communicative ontology of organization? A description, history, and critique of CCO theories for organization science
    Bisel, R.S.
  • Positive deviance case selection as a method for organizational communication: a rationale, how-to, and illustration
    Bisel, R.S.; Kavya, P.; Tracy, S.J.
  • Organizations as networks of communication episodes: turning the network perspective inside out
    Blaschke, S.; Schoeneborn, D.; Seidl, D.
  • A cyberattack hobbles Atlanta, and security experts shudder
    Blinder, A.; Perlroth, N.
  • The rise of resilience
    Boin, A.; Comfort, L.; Demchak, C.; Boin, A.; Comfort, L.; Demchak, C.C.
  • The institutionalization of CCO scholarship: trends from 2000 to 2015
    Boivin, G.; Brummans, B.H.J.M.; Barker, J.R.
  • Swisswindows AG goes bankrupt after Ryuk attack
    Born, G.
  • Approaches to the communicative constitution of organizations
    Brummans, B.; Cooren, F.; Robichaud, D.; Taylor, J.R.; Putnam, L.L.; Mumby, D.K.
  • H1 2020 cyber insurance claims report
  • Materializing communication: making the case for a relational ontology
    Cooren, F.
  • Dislocation and stabilization: how to scale up from interactions to organization
    Cooren, FOIS.; Fairhurst, G.T.; Putnam, L.L.; Nicotera, A.M.
  • Communication, organizing and organization: an overview and introduction to the special issue
    Cooren, F.; Kuhn, T.; Cornelissen, J.P.; Clark, T.
  • ‘The ‘triptych of cyber security’: a classification of active cyber defence
    Dewar, R.S.
  • Should we outlaw ransomware payments?
    Dey, D.; Lahiri, A.
  • Allianz: cyberkriminalität weltweites unternehmensrisiko nummer eins
  • The trade secret: firms that promised high-tech ransomware solutions almost always just pay the hackers
    Dudley, R.; May, J.K.
  • Cyber security meets security politics: complex technology, fragmented politics, and networked science
    Dunn Cavelty, M.; Wenger, A.
  • Microsoft says it has found a Russian operation targeting US political institutions
    Dwoskin, E.; Timberg, C.
  • Cyberterrorism: are we under siege?
    Embar-Seddon, A.Y.N.
  • The cost of ransomware in 2021: a country-by-country analysis
  • Ransomware statistics for 2021: Q2 report
  • ENISA threat landscape 2020 – main incidents in the EU and worldwide
  • Beyond dualism: stability and change as a duality
    Farjoun, M.
  • 2020 internet crime report
  • The role of conversations in producing intentional change in organizations
    Ford, J.D.; Ford, L.W.
  • One year after Atlanta’s ransomware attack, the city says it’s transforming its technology
    Freed, B.
  • Internet surveillance after Snowden: a critical empirical study of computer experts’ attitudes on commercial and state surveillance of the internet and social media post-Edward Snowden
    Fuchs, C.; Trottier, D.
  • Baltimore ransomware nightmare could last weeks more, with big consequences
    Gallagher, S.
  • Is there a (viable) crucial-case method?
    Gerring, J.
  • The untold story of NotPetya, the most devastating cyberattack in history
    Greenberg, A.
  • The worsening state of ransomware
    Greengard, S.
  • Googling for grey: using Google and Duckduckgo to find grey literature
    Hagstrom, C.; Kendall, S.; Cunningham, H.
  • An artificial immune system architecture for computer security applications
    Harmer, P.K.; Williams, P.D.; Gunsch, G.H.; Lamont, G.B.
  • New security approaches for the 21st century – how to support crowd security and responsibility
    Helbing, D.
  • The dispositif of risk management: reconstructing risk management after the financial crisis
    Huber, C.; Scheytt, T.
  • Legalizing lawlessness: on Giorgio Agamben’s state of exception
    Humphreys, S.
  • Encompassing stability and novelty in organization studies: an events-based approach
    Hussenot, A.; Missonier, S.
  • Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains
    Hutchins, E.M.; Cloppert, M.J.; Amin, R.M.
  • The global landscape of AI ethics guidelines
    Jobin, A.; Ienca, M.; Vayena, E.
  • Security Bulletin: Review of the year 2017
  • Security Bulletin: Story of the year 2017: Ransomware’s new Menace
  • The dark side of the internet: attacks, costs and responses
    Kim, W.; Jeong, O.-R.; Kim, C.; So, J.
  • ‘Conceptualizing the ‘corporate nervous net’: decentralized strategic communication based on a digital reporting indicator framework
    Knebel, S.; Seele, P.
  • Cybersecurity: investing for competitive outcomes
    Kosutic, D.; Pigni, F.
  • Cybersecurity in healthcare: a systematic review of modern threats and trends
    Kruse, C.S.; Frederick, B.; Jacobson, T.; Monticone, D.K.
  • The pedagogy of CCO
    Kuhn, T.; Schoeneborn, D.
  • Swisswindows AG macht per sofort dicht: 170 Mitarbeiter entlassen
    Latzer, M.
  • Organizational design and restructuring in response to crises: lessons from computational modeling and real-world cases
    Lin, Z.; Zhao, X.; Ismail, K.M.; Carley, K.M.
  • Theorizing stakeholders of sustainability in the digital age
    Lock, I.; Seele, P.
  • Cybersecurity in health – disentangling value tensions
    Loi, M.; Christen, M.; Kleine, N.; Weber, K.
  • The cost of malware infection? For Maersk, $300 million
    Lord, N.
  • After KKV: the new methodology of qualitative research
    Mahoney, J.
  • Baltimore ransomware attack will cost the city over $18 million
    Maurer, R.
  • Security giant prosegur struck by ransomware
    Muncaster, P.
  • Atlanta spent $2.6M to recover from a $52,000 ransomware scare
    Newman, L.H.
  • A patient has died after ransomware hackers hit a German hospital – this is the first ever case of a fatality being linked to a cyberattack
    O’Neill, P.H.
  • Presidential policy directive (PPD) – 21 critical infrastructure security and resilience
    Obama, B.
  • In Baltimore and beyond, a stolen N.S.A. tool wreaks havoc
    Perlroth, N.; Shane, S.
  • On malfunction, mechanisms and malware classification
    Primiero, G.; Solheim, F.J.; Spring, J.M.
  • Cyber risks and Swiss SMEs: an investigation of employee attitudes and behavioral vulnerabilities
    Pugnetti, C.; Casián, C.
  • Theory building: comparisons of CCO orientations
    Putnam, L.L.; McPhee, R.D.; Putnam, L.L.; Nicotera, A.M.
  • Communicative constitution of organization is a question: critical issues for addressing it
    Putnam, L.L.; Nicotera, A.M.
  • Contradictions, dialectics, and paradoxes in organizations: a constitutive approach
    Putnam, L.L.; Fairhurst, G.T.; Banghart, S.
  • Is communication constitutive of organization?
    Reed, M.
  • A City Paid a Hefty Ransom to Hackers. But Its Pains Are Far From Over
    Robles, F.
  • You can generalize stupid! Social scientists, Bent Flyvbjerg, and case study methodology
    Ruddin, L.P.
  • Russia’s most aggressive ransomware group disappeared. It’s unclear who disabled them
    Sanger, D.E.
  • Pipeline attack yields urgent lessons about US cybersecurity
    Sanger, D.E.; Perlroth, N.
  • Zurückgehackt: Deutscher Webentwickler wehrt sich gegen Ransomware
    Scherschel, F.A.
  • Organization as communication: a Luhmannian perspective
    Schoeneborn, D.
  • When birds of different feather flock together: the emerging debate on ‘organization as communication’ in the German-speaking countries
    Schoeneborn, D.; Sandhu, S.
  • Clandestine organizations, Al Qaeda, and the paradox of (in)visibility: a response to Stohl and Stohl
    Schoeneborn, D.; Scherer, A.G.
  • The communicative constitution of organization, organizing, and organizationality
    Schoeneborn, D.; Kuhn, T.R.; Kärreman, D.
  • The three schools of CCO thinking
    Schoeneborn, D.; Blaschke, S.; Cooren, F.; McPhee, R.D.; Seidl, D.; Taylor, J.R.
  • Examination of cybercrime and its effects on corporate stock value
    Smith, K.T.; Jones, A.; Johnson, L.; Smith, L.M.
  • The state of ransomware: results of an independent study of 5,000 IT managers across 26 countries
  • Allianz risk barometer: identifying the major business risks for 2020
    Specialty, A.G.C.
  • Florida city pays $600,000 ransom to save computer records
    Spencer, T.
  • Organizing from the bottom up? Reflections on the constitution of organization in communication
    Taylor, J.R.; Putnam, L.L.; Nicotera, A.M.
  • On organizational becoming: rethinking organizational change
    Tsoukas, H.; Chia, R.
  • Introduction to the special issue: towards the ecological style: embracing complexity in organizational research
    Tsoukas, H.; Dooley, K.J.
  • Security firm Prosegur: We’ve shut our IT network after Ryuk ransomware attack
    Tung, L.
  • Summoning the spirits: organizational texts and the (dis)ordering properties of communication
    Vásquez, C.; Schoeneborn, D.; Sergi, V.
  • Cybersecurity and information security - what goes where?
    von Solms, B.; von Solms, R.
  • Microsoft Launches Cybercrime Center
    Wait, P.
  • Policing diversity in the digital age: maintaining order in virtual communities
    Wall, D.S.; Williams, M.
  • The syrian electronic army – a hacktivist group
    Warren, M.; Leitch, S.
  • Organizing and the process of sensemaking
    Weick, K.E.; Sutcliffe, K.M.; Obstfeld, D.
  • Sicherheitsvorfall beim Sicherheitsdienst: Ransomware “Ryuk” befällt Prosegur
    Westernhagen, O. V.
  • Erpresser erbeuten 400.000 US-Dollar durch Cyber-Angriff
    Wiegand, D.
  • Cyber resilience: how important is your reputation? How effective are your people?
    Wilding, N.
  • Was emotet anrichtet - und welche lehren die opfer daraus ziehen
    Wölbert, C.
  • Cryptovirology: the birth, neglect, and explosion of ransomware
    Young, A.L.; Yung, M.
  • Quantifying cyberinfrastructure resilience against multi‐event attacks
    Zobel, C.W.; Khansa, L.